Unclear It is unclear whether the redirection recheck always applies or depends on a switch that could not be identified.
Permission rules let you allow shell commands so Claude can run them without asking. Output redirection is the part of a command, such as > file.txt, that sends its output into a file. Before, a command could be allowed because a rule matched it with the redirection removed. Claude Code now rechecks the command with its redirection included. If that full form is not allowed, the command is not approved, and the reason given is "Allowed by a permission rule only with its output redirection removed; not allowed as written".
The check that decides whether a ps command only reads information was also tightened. It now treats --forest and several combinations of options differently.
An allow rule meant for a harmless command could previously approve that same command writing to a file through redirection. Commands like that now go through the normal permission prompt.
It is unclear whether the redirection recheck always applies or depends on a switch that could not be identified.