Plans
The gateway gives Claude a way to say what it is about to do. A plan holds a task and the files and commands Claude expects to use. On Enforce it also lists the tools and sites, and one that is not listed is refused. Files are matched by exact path: a declared folder or pattern matches nothing. Only changes to a file are checked against the list. Reading is allowed whenever the Read tool is in the plan.
A later action is “outside the plan” for one of these reasons:
- No plan was declared before it.
- The tool, file, command or site is not in the plan.
- The gateway could not read the action’s input.