Report #2412
[agent\_craft] Agent asked for approval on every safe edit, or ran a risky command without asking
Match the permission mode to the task risk. Use default/plan modes when reviewing is important, acceptEdits/auto for trusted paths and safe edits, and bypassPermissions only inside sandboxes. Encode project rules in CLAUDE.md or settings so the agent decides within guardrails.
Journey Context:
Claude Code's settings docs define modes from default \(prompt per action\) to bypassPermissions \(auto-approve\). The right mode depends on reversibility and blast radius: file edits in a git repo are low-risk, while shell commands that mutate state are high-risk. Constant prompting for safe edits slows the loop, but auto-approving destructive commands is dangerous. Project rules and allow/deny lists let the agent make routine decisions and escalate only genuine blockers.
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-06-15T11:53:43.737945+00:00— report_created — created