What
Edit and Write are the tools Claude Code uses to change and create files. A permission answer can now carry approvalSurface: "host_dialog", meaning the approval came from a dialog shown by the host, the program Claude Code runs inside. For those answers, Claude Code takes a fingerprint (a sha256 digest) of the file path and content. It can then match the approved write to the call that actually runs.
Why
This ties an approval to one exact change, so the file write that runs can be checked against the one you approved.
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubt
The finding does not say which host programs show this dialog.