Unclear Which permission changes the check alters or drops, and on what grounds, is not known.
A permission rule is a saved choice about what Claude Code may do without asking you first. Several places that save these rules now pass them through one shared check before saving. The check can return a changed set of rules and a reason. When it gives a reason, Claude Code adds it to the session as a system note, a short message from Claude Code rather than from you or the model.
The places that now use this check are:
- the network access prompt shown while Claude Code runs in a sandbox, a restricted mode that limits what commands can reach
- the path used when Claude Code is started by a launcher
- the "always allow" choice in a permission dialog
- network rules
Before, these places saved the rules directly.
A rule you approve may now be saved in a changed form or not saved at all, and Claude Code tells you why in the session when that happens.
Which permission changes the check alters or drops, and on what grounds, is not known.