What's wrong with this entry?
The /auto-mode-setup recon now reads and reports autoMode keys from the project's .claude/settings.local.json, subject to strict security checks: the file must be a regular file (not a symlink) with link count 1 inside a real .claude directory. The output also notes whether the file is tracked in git (yes — repo-authored vs no — but untracked does not prove user-authored).
Local settings autoMode reader (search for "Project \.claude/settings.local.json\ — autoMode keys" and "Tracked in git")
Strings lifted out of the shipped bundle, so the claim above can be checked against them.