Full current guidance for Installing Claude Code: setup, settings.json, and hardening:
- Re-verify provenance on every version bump, not just first install.
- Keep an allowlist of trusted publishers and pin to it.
- Log and review all tool/dependency changes in CI.
- Prefer signed releases and reproducible builds where available.