Never prompts, so a turn cannot hang waiting for a person nobody can answer for.
Never prompts, so a turn cannot hang waiting for a person nobody can answer for.
Not a hard allow-list, whatever the name suggests. Measured against the CLI at 2.1.250: a Bash call it reads as harmless runs even when Bash is in no allow-list (ls ui/src came back with the listing), while one that writes is refused ("Permission to use Bash has been denied because Claude Code is running in don't ask mode") and leaves nothing behind. So what a session may reach rests on the CLI's reading of each call. Name what must never run in disallowedTools, where a refusal outranks every permission.