You'll notice
Useful3 Signal3
Bypass permissions mode now gets the same shell-first behaviour auto mode already had.
What's wrong with this entry?
Anonymous. No account, no email.
What
The instruction telling Claude to do its work through the shell tool rather than the separate read, edit and write tools was previously added only in auto mode. It now has a bypass permissions branch too, so sessions in that mode get the same behaviour.
Evidence
While bypass permissions mode is active:
Strings lifted out of the shipped bundle, so the claim above can be checked against them.