ask permission rules, global CLAUDE.md instructions bypassed in auto mode

Description

When auto mode is active, Claude Code bypasses ask permission rules for destructive git commands.

Specific example: uncommitted work destroyed

The user had been working on a file with ~300 lines of carefully reviewed code. They asked Claude to "revert changes" (meaning undo the last edit). Instead, Claude ran:

git checkout -- path/to/file.cs

This discarded ALL uncommitted changes to the file without asking for confirmation. The user had to re-apply all changes manually. This happened multiple times in the same session.

The ask permission rules were configured to require approval for git checkout -- commands. The prompt was not shown.

Expected behavior

git checkout -- (and other destructive git commands matching ask permission patterns) should always prompt the user for approval, even in auto mode.

Impact

User lost in-progress work multiple times due to destructive git commands being executed without confirmation.