What
Permission allow-rules and additional directory grants from .claude/settings.json and .claude/settings.local.json are now silently ignored when the workspace has not yet been trusted via the interactive trust dialog.
Details
- Logs to stderr: "Ignoring N permissions.allow entries from .claude/settings.json: this workspace has not been trusted. Run Claude Code interactively here once and accept the trust dialog, or set
projects[\"...\"].hasTrustDialogAccepted: truein~/.claude/settings.json." - Only applies before the trust dialog has been accepted for this workspace; once trusted, all settings are applied normally.
- Managed (policy-level) settings are still honored regardless of trust state.
Evidence
New enforcement logic (search for "this workspace has not been trusted. Run Claude Code interactively here once")
Strings lifted out of the shipped bundle, so the claim above can be checked against them.