As with software its probably better to run Claude in a VM (with dangerously skip permissions) so you don't have to keep approving changes & all changes tracked by git to allow easy rollback.
You seem to have figured out the right approach.
Too often you will see: "I gave AI this one question and it failed. AI is useless."
I mean if I want to sit down and have Claude produce garbage, I can. Instead, like you did, I just gave claude the bits it CAN do well. Those are then offloaded from me, so I can spend more time on the bits where I am faster. Even doing admin etc. Learning new things I can offload to it is good fun too.
It's "cognitive offload", but that is not the same as "thinking offload". The LLM cannot 'think' in the same way we can. It's "modelling abilities" are a micro-fraction of what humans do almost constantly. Model, compare, predict, assess, loop.
This brings me to your suggestion of "dangerously skip permission" and ignore it's prompts. This is taking you out of the loop. Without you in the loop the LLM is piss poor. So for that strategy to work you need to do all the thinking up front and document it prior to prompting. This is what most "Prompt engineering" guides would be telling you before 2025. Prior to 2025 it was more efficient to just "clear context" and run the same prompt over and over again with small modifications until you get what you want. Chatting back and forth with them tended to cause confusion with the "Pro" point being almost equally weighted to the correcting prompt. Later the two would compact to be exactly equal weight and it would return etc. This is not the best way in 2026 though. The context size has expanded dramatically. To "pre-load" and "single shot prompt" it with a full 200k ... from manually created specs and docs ... will take you a massive amount of effort.
So I would suggests staying in the loop with it. Task it with small tasks that you choose, small enough that you can rapidly verify the output is correct.
When it makes stupid suggestions, and this is important, I do not labour the point. I use "positive direction" instead of "negating". If claude says, "X is Y" and it's not. Then saying, "No, X is not equal to Y", to an LLM is risky. It may not actually see the gravity of the "not" there. It's just one token. Changes everything, but it is a known limitation that they do not take the "not" as significantly as they should. You are better to reframe it with something like, "I believe X is actually Z" and resteer it.
Contray to your approach, the strategy I take on the day job is the opposite. I tell it to interview me for all decisions. So the prompt will always have ambiquity to it. That's why we write software in code and not english. So with "silent mode" engaged it will just make something up statistically based on how it landed in training data. With the opposite, it will prompt the "human" when there is more than one possibly direction to take.
In fact I am considering extending this into a PoC called "AI Assistant Compliance". The LLMs in use by a team are pre-prompted to be always prompting the user and asking for decisions. So when the software blows up, deletes people accounts and the team says, "The AI did it!", the answer from compliance is... "Actually you answered 'Yes' to 47 of claudes questions, the AI policy does state that YOU are responsible for it's output, these interview logs show you "decided" at each key point. There for you are accountable."
Further. If you hit "Yes" too quickly, it knows this too, logs this and instead "punishes" you with a reverse prompt. Instead of telling you the "good points" of each of the 3 options it presented. It shows you the "Now here's what blows up and gets destroyed if you choose these options.", just an "Oww! Human! Do your job!" caution.
Claude emits:
...."Should I delete the master branch?"
and the user just auto-pilot hits "Enter" for Yes.
"WARNING! You have failed an AI Assistant compliance and vigilance test. You have been enrolled on mandatory AI Compliance Policy training. An invite will be in your calendar."
Just like they do with phishing email tests.