[BUG] Glob is too eager?

Environment

• Platform (select one):
• [x] Anthropic API
• [ ] AWS Bedrock
• [ ] Google Vertex AI
• [ ] Other: <!-- specify -->
• Claude CLI version: 1.0.2 (Claude Code)
• Operating System: macOS
• Terminal: iTerm2

Bug Description

I have the following permission:

"deny": [
      "Edit(README.md)",
      "MultiEdit(README.md)",
      "Write(README.md)"
]

But it seems to be too eager, and matches _any_ README.md file in the repo.

But if I change the paths to ./README.md then they are not respected.

So, how can I specify the README.md in the root?

Steps to Reproduce

See above.

Expected Behavior

Allow specifying exact paths relative to the root.

Actual Behavior

See above.

Additional Context

N/A