New CLAUDE_CODE_EVEN_MORE_DANGEROUSLY_SKIP_PERMISSIONS variable and protections that bypass cannot waive

What

This release adds a new environment variable (a setting passed to Claude Code from your shell), CLAUDE_CODE_EVEN_MORE_DANGEROUSLY_SKIP_PERMISSIONS. It sits in two lists next to other overrides for delete prompts and trust, such as CLAUDE_CODE_DISABLE_MOUNTED_DRIVE_RM_PROMPT and CLAUDE_CODE_IGNORE_PERSISTED_TRUST. The finding did not look at what the variable does.

Two permission rules also gain a new waivableInBypass field, set to false (waivableInBypass: !1). Bypass mode is where Claude Code skips its usual permission prompts.

• The outsideReadsBlocked entry, which covers reading outside allowed locations, now has waivableInBypass: !1.
• The background-operator permission profile now has waivableInBypass: !1. Its bypassImmune field is also !1.

Why

If you or your organisation use bypass mode or manage permission settings, note that some protections are now marked as not waivable in that mode. The name of the new variable points to a stronger way to skip permissions than the existing one, but what it does has not been read.