A CLAUDE.md says never to deploy to production. What makes that boundary dependable?

A CLAUDE.md says never to deploy to production. What makes that boundary dependable?

1. Do not expose production credentials or routes, and deny production targets in host or server policy
2. Repeat the sentence in three headings so the model sees it more often
3. Rename the MCP tool from deploy to safe_deploy
4. Return a warning after the deployment has finished