CCAR-P: Claude Certified Architect — Professional

A read-only database credential and a tool list limited to read-only operations prevent unintended writes by default, while explicit human confirmation provides an approval gate before any data-changing action. This applies defense in depth and least privilege to production access. Claude Code supports restricting available tools and permission prompts for actions that require approval.