The session is started with --permission-mode dontAsk and one --allow or --deny per rule. Bash(cmd:*) was checked on this machine. Checkout and a PowerShell prefix cover the loop prompt; pushes to main, staging, and branch deletes stay denied.
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>