Before Claude runs a shell command, Claude Code checks whether it may run it without asking you. These checks change:
cpandmvnow understand the-t,-S,-band--backupoptions and work out where files will actually landcpandmvnow ask you when a backup file's name depends on your environmentrmandrmdirtargets written with${HOME...}are now expanded and checked- a matching deny rule, a rule you set to block a command, can now override the check for dangerous
rmdeletions
These checks also read the CLAUDE_CODE_DISABLE_SUBSTITUTION_RM_PROMPT environment variable. One gate involved is on by default in the code unless it is switched off remotely.
These close gaps where a command that changes files could get past the permission check.
tengu_iridescent_boot Not enough to sayNothing here resolved what this flag was doing on this version, so nothing here should be read as on or off.
This account: no value returned · anonymous baseline: no value returned · compiled default in v2.1.321: on
These values were read against a different version of Claude Code, so treat them as the nearest reading available instead of one taken on this release.
Read once, for one account on one subscription tier, against v2.1.321. It isn't a statement about your account. What a flag value here can and cannot tell you