Why not run Claude on an FUSE based filesystem, and make a script that shows the user which files are being accessed?
Why not script automatic C-o injection?
Ultimately, the problem is the tool turning against the user. Maybe it is time to get a new tool.
"You can already build such a system yourself quite trivially by getting an FTP account, mounting it locally with curlftpfs, and then using SVN or CVS on the mounted filesystem" — https://news.ycombinator.com/item?id=9224