[Bug] Allow lists not enforced properly - commands execute despite restrictions

Bug Description
the allow lists are crap. claude never seems to listen to them. or it adds too-precise allows. Bash ls ALWAYS for example. I need it to be virtually dangerous mode.

Environment Info

• Platform: linux
• Terminal: kitty
• Version: 2.0.76
• Feedback ID: 3828179c-8a12-4ddc-990e-14ab9ce41e05

Errors

[{"error":"Error: NON-FATAL: Lock acquisition failed for /home/dlwiii/.local/share/claude/versions/2.0.76 (expected in multi-process scenarios)\n    at W3$ (/$bunfs/root/claude:2427:2165)\n    at TTA (/$bunfs/root/claude:2427:1885)\n    at processTicksAndRejections (native:7:39)","timestamp":"2025-12-26T17:51:24.683Z"}]