diff --git a/CLAUDE.md b/CLAUDE.md
index f7e6aa0..51388e4 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -54,3 +54,4 @@ Uses SDL2 (not SDL3). Uses `#if LIBAVUTIL_VERSION_INT` preprocessor checks to su
 - Minimize dependencies; discuss with owner before adding any
 - Non-fatal errors go to stderr and continue; fatal errors (SDL init failures) abort via `panic_and_abort()`
 - Update the changelog in `docs/sdlamp2-fsd.md` when making changes
+- Never run privileged Docker containers or make system-wide changes without explicit approval; explain what's needed and let the owner do it manually