Unclear It is not clear where these suggestions are shown, or whether you will see them yet.
What
A permission rule tells Claude Code what it may do without asking you first. Claude Code can now recognise rule text in two forms:
- Text ending in
@sha256:followed by a 64-character digest. A digest is a fingerprint that identifies one exact version of something. - Text ending in
:*.
From either form it can build one suggested allow rule with that same text, saved to your user settings.
Why
This may lead to a permission prompt that offers to allow one exact version of a container image. A container image is a packaged software environment.
Names in the bundle@sha256
Documented inapi/agents-and-tools/mcp-tunnels/deploy-compose
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubt
It is not clear where these suggestions are shown, or whether you will see them yet.