Unclear Which commands match the pattern, and what the second check does differently, is not clear.
What
Before Claude Code runs a shell command, it checks whether the command is allowed. A new step now wraps that check. If the command matches a particular pattern and the remote switch tengu_quiet_sextant is on, Claude Code runs the permission check a second time in a different way. If that second check denies the command, the command is denied, and the reason shown combines both results.
Why
A command that the normal check would allow can now end up denied, so a command you expect to run may be blocked.
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubt
Which commands match the pattern, and what the second check does differently, is not clear.