@misc{indiciaef93db398cc6b,
  title = {When "Do Not" Is Not Deny: Security Rules in CLAUDE.md vs Built-In Controls},
  author = {Ting Yan},
  year = {2026},
  url = {https://arxiv.org/abs/2608.23550},
  note = {Source identifier: 2608.23550}
}