Copying assets between artifacts gains a new auto-approval path that can bypass the older consent check
When copying an asset from one artifact to another using copy_from, the permission flow now has an additional path: outside of plan-mode consent tracking, it can check a write-permission ruling from the automatic classifier and allow or ask for approval based on that, without going through the older consent-tracking flow for source and destination.
This is a further adjustment to how copy_from decides whether to allow, ask, or deny a copy, building on the permission-rule checks already added for this action; readers relying on that consent-based flow should be aware another path can now grant or request approval directly.
The finding does not fully explain how this new branch interacts with the deny/ask permission-rule engine described previously, so the exact…