Unclear It is not clear which situations cause the permission rules to be left out of the auto mode check.
In auto mode, Claude Code uses a separate check, called a classifier, to decide whether an action is safe to run without asking you. Claude Code gives that check a summary of your permission rules and the folders it may use.
In some situations that summary is now trimmed. When this happens, the check is not given:
- your ask rules, the rules that say when Claude Code must ask first
- additional and network directories
- the different spellings of resolved paths and the root folders of your rules
In the same situations the number of allow rules passed along is capped at a built-in default instead of your configured value. Claude Code's record that the summary was incomplete now notes whether only the rules were left out or the whole summary, and repeats are counted separately for each kind. The list of things auto mode allows also gains one more entry, taken from your environment.
This changes what the auto mode check knows about your permissions in some modes, which can affect what it lets through without asking.
It is not clear which situations cause the permission rules to be left out of the auto mode check.