[Bug] Plan Mode not enforced: Claude executes actions without waiting for user approval

Bug Description
Title: Plan Mode is being ignored — Claude executes actions without waiting for user to exit Plan Mode

Environment: Claude Code CLI on Windows 11, Opus model, bypass permissions enabled (custom shortcut alias), language:
Spanish

Description:

I've experienced this issue across multiple sessions. When I enter Plan Mode to align on an approach before execution,
Claude does not wait for me to explicitly exit Plan Mode. Instead, it skips the planning phase entirely and starts
executing actions (edits, file writes, skill invocations) on its own — defeating the entire purpose of Plan Mode.

This is especially problematic when combined with bypass permissions / accept edits, because Claude not only skips the
planning step but also immediately writes to files without any checkpoint where I can review or approve the plan.

Expected behavior:

• When I enter Plan Mode, Claude should ONLY discuss, propose, and plan.
• Claude should NOT execute any writes, edits, or tool calls until I explicitly exit Plan Mode.
• The plan should be a collaborative step — I need to review and approve before execution begins.

Actual behavior:

• Claude acknowledges Plan Mode briefly (or not at all), then proceeds to execute actions.
• File edits and skill invocations happen before I've approved any plan.
• There is no real "gate" between planning and execution.

Impact: High. Plan Mode is supposed to be a safety mechanism for complex tasks. When it's ignored, I lose control over
the execution flow, which is the opposite of what the feature promises. I rely on planning to scope work correctly
before Claude touches files.

Additional context: I'm a Spanish-speaking user (Colombia) writing this in English for clarity. My daily workflow
depends heavily on Claude Code with autonomous permissions, which makes this Plan Mode bypass even riskier — there's
no second gate to catch unplanned actions.

Suggestion: Plan Mode should be a hard constraint, not a soft hint. While in Plan Mode, tool calls that modify state
(Write, Edit, Bash with side effects, Skills) should be blocked at the system level, not just "encouraged to avoid."

Environment Info

• Platform: win32
• Terminal: windows-terminal
• Version: 2.1.85
• Feedback ID: 172bf922-44c0-44dd-b567-d075bf9f1651

Errors

[]