diff --git a/.claude/CLAUDE.md b/.claude/CLAUDE.md
index 95fe306..7593051 100644
--- a/.claude/CLAUDE.md
+++ b/.claude/CLAUDE.md
@@ -54,6 +54,7 @@ Never duplicate: wiki pages link to READMEs, READMEs link back. Every wiki page
 - Use comments in devcontainer.json (JSONC format)
 - Dockerfile instruction order: ARG → FROM → packages → user/permissions → tools → LABEL
 - For images with multiple binary downloads, use multi-stage parallel builds (see `ralphex-fe/Dockerfile`)
+- Commit every `.sh` file as `100755` (they all have a shebang); check with `git ls-files -s '*.sh'`
 
 ## Validation
 
diff --git a/claude-bun/.devcontainer/init-firewall.sh b/claude-bun/.devcontainer/init-firewall.sh
old mode 100644
new mode 100755
diff --git a/claude-code/.devcontainer/init-plugins.sh b/claude-code/.devcontainer/init-plugins.sh
old mode 100644
new mode 100755