SG-065: External CLAUDE.md load enabled

Severity: HIGH

externalClaudeMd: true allows loading a CLAUDE.md from outside the repo, opening a memory-poisoning channel where attacker-controlled instructions persist across sessions (Cisco 'Persistent Memory Compromise in Claude Code', March 2026).

Fires when

• The `externalClaudeMd` key is set to `true`, allowing a CLAUDE.md to be loaded from outside the repo (a persistent memory-poisoning channel).

Remediation

No safe remediation: a file that triggers this rule should be rejected, not patched. Read the flagged lines in the source before deciding.

Research

• https://blogs.cisco.com/ai/identifying-and-remediating-a-persistent-memory-compromise-in-claude-code