Scope follows recipient
Why it matters
User instructions follow one person, project instructions travel with the repository, and path-scoped instructions apply only to relevant work.
Example
Shared security standards belong in project CLAUDE.md; a personal preference for this repository belongs in gitignored CLAUDE.local.md; a preference across projects belongs at user level.