[Bug] Opus model ignoring plan mode restrictions and executing bash commands without approval

Bug Description
Opus 4.6 (1M) overrules the plan mode multiple times since last 36 hours and ran bash commands without approval. This was specifically instructred not to do bypass permissions for BASH from plan mode, and even added on Memories. failed instructions.

Environment Info

• Platform: linux
• Terminal: ghostty
• Version: 2.1.96
• Feedback ID: 41631549-fbec-4101-b7f1-e0678bea8308

Errors

[{"error":"Error: NON-FATAL: Lock acquisition failed for /home/sidhartha/.local/share/claude/versions/2.1.96 (expected in multi-process scenarios)\n    at Cg$ (/$bunfs/root/src/entrypoints/cli.js:1888:2153)\n    at ni8 (/$bunfs/root/src/entrypoints/cli.js:1888:1233)\n    at processTicksAndRejections (native:7:39)","timestamp":"2026-04-08T05:49:30.936Z"},{"error":"Error: Request was aborted.\n    at sh$ (/$bunfs/root/src/entrypoints/cli.js:1243:11929)\n    at next (native:1:11)\n    at vC7 (/$bunfs/root/src/entrypoints/cli.js:7775:9035)\n    at next (native:1:11)\n    at VC7 (/$bunfs/root/src/entrypoints/cli.js:7780:11451)\n    at processTicksAndRejections (native:7:39)","timestamp":"2026-04-08T05:51:55.956Z"}]