build1 publisher
A broad deny in Claude Code outranks the narrow allow meant to except it
Permission rules accumulate from "yes, don't ask again" answers into a repo-local file, and because matching runs deny then ask then allow with no specificity tiebreak, a policy that reads correctly can still stall an unattended run.
Publishers:dev.to
Reality
- Evidence55
- Adoption22
- Hype gap+8
- Incentives32