Bash(git commit) bypasses permission prompt in default mode

Description

Bash(git commit ...) ran without triggering a permission prompt despite the session being in default permission mode and no prior approval being granted.

Settings

• Permission mode: default
• Only explicit allow rules: Bash(shellcheck *) and Bash(shfmt *)
• No Bash(git *) or Bash(git commit *) in the allow list

What happened

1. User invoked /commit skill
2. Claude ran git add README.md (prompted and approved)
3. Claude ran git commit -m "..." — no permission prompt was shown
4. The commit executed successfully

Expected behavior

git commit should have triggered a permission prompt since it is not in the allow list.

Evidence

• Session transcript at 8f5552af-271b-4211-8900-01f8383ed419.jsonl shows permissionMode: "default" and no decision/approval records for the git commit call
• settings.json has no git-related allow rules

Environment

• Claude Code (CLI)
• Linux (Debian)
• Model: claude-opus-4-6