The system prompt now includes context about how tool permissions work, explaining that tools are executed in a user-selected permission mode and that denied tool calls should not be re-attempted without adjusting the approach.
Evidence
Permission context in system prompt (search for "Tools are executed in a user-selected permission mode")
Strings lifted out of the shipped bundle, so the claim above can be checked against them.