Recent Claude Code research shows how a saved approval can hold a credential. Use a harmless Git exercise to distinguish local settings, tracking and exposure.