You'll notice
Denied batched writes now name the offending rule more prominently and say which write was not applied.
The message shown when a permission rule denies a batched write tool call now reads "...has been denied by your rule ... (writes[i]...)", making the offending rule more prominent. Separately, the write-failure message now appends "; writes[n] was not applied" to the underlying error.