Search results are checked against your deny rules in more cases

Deny rules are permission settings that tell Claude Code not to touch certain files or folders. When Claude Code searches file contents with Grep or lists files, it can check each result against your permissions one by one. It now does that whenever there are deny rules for the place being searched and an extra check on the file's full resolved path passes. Before, this per-result check ran only in narrower conditions.