diff --git a/.claude/settings.json b/.claude/settings.json
index 5d78761..d89dbbd 100644
--- a/.claude/settings.json
+++ b/.claude/settings.json
@@ -9,6 +9,8 @@
       "Bash(maas admin * read*)",
       "Bash(openstack * list*)", "Bash(openstack * show*)",
       "Bash(bash scripts/repo-lint.sh*)",
+      "Bash(bash scripts/ledger-scan.sh*)",
+      "Bash(bash scripts/opentofu-validate.sh*)",
       "Bash(bash scripts/run-tests-all.sh*)",
       "Bash(bash scripts/cloud-assert.sh)",
       "Bash(bash scripts/preflight.sh*)",
diff --git a/docs/changelog-20260723-queue-pass.md b/docs/changelog-20260723-queue-pass.md
index dd6b89a..d0b2b4d 100644
--- a/docs/changelog-20260723-queue-pass.md
+++ b/docs/changelog-20260723-queue-pass.md
@@ -192,3 +192,13 @@
   migration-plan draft (untouched -- needs its own session), G13 execution
   (gated live mutations), NetBox write-path bugs (before next NetBox write
   campaign), SEC rows (v1 close / external).
+
+## Item 11 -- session-permissions review (operator-requested mid-session)
+
+- Transcript scan (50 recent sessions): two read-only, repo-local entries added
+  to `.claude/settings.json` allow (`ledger-scan.sh`, `opentofu-validate.sh` --
+  38 + 11 historical prompts). Everything else either already allowlisted,
+  auto-allowed, a banned shape (bare interpreters), or a DELIBERATE mutation
+  gate (script-wrapped live commands, ssh/virsh, tofu, git write ops) left
+  untouched -- the ask/deny walls were not modified.
+- REVERT: remove the two lines.