{"version":"2.1.271","anchor":"deny-rules-can-be-overridden-for-classifier-flagged-tools-in","canonical_anchor":"deny-rules-can-be-overridden-for-classifier-flagged-tools-in","heading":"Deny rules can be overridden for classifier-flagged tools in auto\/sandboxed plan mode","tier":"internal","area":"Permissions","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.271\/e\/deny-rules-can-be-overridden-for-classifier-flagged-tools-in","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.271","markdown":"### Deny rules can be overridden for classifier-flagged tools in auto\/sandboxed plan mode\n\nDeny rules can now be bypassed for certain flagged tools when in auto mode or sandboxed plan mode\n\n**What**\n\nClaude Code's core permission check now has a narrow exception to its hard \"deny\" outcomes. A tool call that would normally be denied outright can instead fall through to further evaluation, but only when all of these are true:\n\n- the tool is one whose classifier marks it as \"flag on block\" rather than a hard block\n\n- the session is in auto mode, or in plan mode with sandboxing active\n\n- no explicit deny rule for it exists once always-deny rules from user, project, local, and session settings are excluded\n\n**Why**\n\nThis lets tools that are only meant to be flagged (not hard-blocked) avoid being denied outright in auto or sandboxed-plan sessions, as long as no explicit deny rule actually applies to them.\n\n- Area: Permissions\n- Tier: Under the hood\n- Useful: 2\/5\n- Signal: 3\/5"}