Permission Modes, Settings and Sandbox: Running Claude Code Under Control
What Claude Code is allowed to do is decided by permission rules that Claude Code itself enforces, not by CLAUDE.md: a deny wins at every level and in every mode, but a Bash rule matches command text, not the program. The six permission modes, the Auto mode classifier, settings.json layers and precedence, allow/ask/deny syntax, Bookstore's team settings and the sandbox that native Windows lacks.
15 Nov 2026
·
12 min
·
4
