Read permission prompt fires despite matching //path rule in settings.json

Bug Description

A Read permission prompt fires for a subagent (Explore agent) despite a matching absolute path rule being configured in ~/.claude/settings.json.

Reproduction

Settings (in ~/.claude/settings.json)

{
  "permissions": {
    "allow": [
      "Read(./**)",
      "Read(//Users/danielgorin/DevRemote/**)"
    ]
  }
}

What happened

An Explore subagent attempted to read:

Read(/Users/CheckMade.Server.Tests/Integration/General.CloudServices/GoogleApiTests.cs)

The full absolute path is under /Users/danielgorin/DevRemote/CheckMadeLtd_GitHub/CheckMade/, which should match Read(//Users/danielgorin/DevRemote/**).

The project-relative rule Read(./**) should also match since the file is within the project tree.

Despite both rules, a permission prompt was shown:

Read file Read(/Users/CheckMade.Server.Tests/Integration/General.CloudServices/GoogleApiTests.cs) Do you want to proceed?

<img width="803" height="463" alt="Image" src="https://github.com/user-attachments/assets/63c2453a-3891-4d4b-b60e-4eb433cc88d5" />

Hypothesis

This may be a bug in how subagent (Explore agent) permissions inherit from the parent session, or a bug in the glob matcher for //path patterns.

Environment

• macOS (Darwin 25.3.0)
• Claude Code CLI