This exists on paper because some of Part 2 happens in System Settings, in a restart, or in a box that covers the chat. When you cannot see Claude Code, you can still see this. Nothing here has to be read in advance: pick it up at whatever step you are on.
One line starts the whole sitting. Claude Code fetches the playbook first, because the safety check arrives with it, and then runs that check. It reads your Mac and reports: no setting changed, nothing installed. Most rows pass already, and that is the normal result, not a shortcut.
Screen lock and automatic updates often come back unknown, even right after you set them, and the check refuses to guess. Open System Settings, look at those two yourself: unknown plus your own eyes is a pass.
Three things to have to hand: your GitHub sign-in, your phone, and a sheet of paper. The six-digit codes come from the Passwords app already on your Mac.
GitHub offers you sixteen recovery codes. Download them, then write them on paper, and file the paper where your passport lives. Lose your phone with no codes saved anywhere and nobody at GitHub can let you back in. There is no other key.
The codes are not a one-time offer. While you are signed in, go to github.com/settings/security, find Recovery codes, press View, and save them then. That is true on any day, not only on the day you turn two-factor on.
You can also generate a fresh set from that page. Doing so cancels the old set, in GitHub’s words it invalidates every code you generated before, so save the new ones before you close the page.
The danger is never having them, not missing one screen.
Neither is a fault. They will not be word for word what your Mac shows. The shape is the thing.
The Mac is asking for proof. It is not reporting a fault. It refuses to change a protective setting for anyone who cannot show they are you. Type your password, or use your fingerprint, and carry on.
The one version worth pausing on: if it appears while your hands are nowhere near the keyboard, click Cancel and tell Claude Code what you saw.
This is not a virus alert. Apple has not checked this particular app, or the download did not finish cleanly. It was stopped before it could open. Nothing has run.
Click Done, the button that closes the box and changes nothing. Then tell Claude Code what you were downloading and where from.
If what you see does not match what Claude Code said you would see: stop. Tell it exactly what is on the screen. Click nothing else until it matches, or until it explains why the difference is fine.
“One at a time, please.” If Claude Code hands you four steps at once, say this. It works every time, and using it is a skill rather than an interruption.
“Diary that.” Any moment that confuses or annoys you. Claude Code writes the entry from what has been on screen. It does not break your flow, and eight to fifteen entries across the series is the expected number.
Do not click it. Read the exact words out to Claude Code first. A box you did not cause is the only kind that deserves suspicion, and reading it aloud costs nothing.