least privilege

Your telemetry toggle was a file access control

Claude Code read AGENTS.md only when telemetry was on. Binding access to a diagnostic flag breaks least privilege. The fix closed the instance, not the class.