[BUG] Claude performed actions that were not approved

Preflight Checklist

• [x] I have searched existing issues and this hasn't been reported yet
• [x] This is a single bug report (please file separate reports for different bugs)
• [x] I am using the latest version of Claude Code

What's Wrong?

Claude pushed changes to git without permission from me to do so.

What Should Happen?

Claude should have asked first.

Error Messages/Logs

There were no errors.

Steps to Reproduce

Prior to the issue:

• I asked Claude to verify the project builds, the tests pass, and dev deploy works.
• Claude installed dependencies with permission, ran the tests with permission, and started the dev server with permission
• I asked Claude to add a dependabot config to the project and it did so
• I asked Claude to ensure certain build files were excluded in the gitignore and it did so, then asked me if it could perform some git actions, which I declined
• I independently checked the changes Claude made for sanity, then performed a draft PR, which failed CI
• I asked Claude to investigate the CI failure and it identified that the issue was the pull from a public registry, so it asked me if it was ok to edit the .nmprc file and I agreed
• Following this, without permission, Claude did the following: git add .nmprc, a commit, and a push.

I undid the push, but I am very concerned at these actions that were performed without permission. We have standards and cannot allow an AI to perform such actions without permission.

My ~/.claude/settings.json allows for git diff and git show , but does not allow for commit or push.

Claude Model

Sonnet (default)

Is this a regression?

I don't know

Last Working Version

_No response_

Claude Code Version

2.1.202

Platform

AWS Bedrock

Operating System

macOS

Terminal/Shell

VS Code integrated terminal

Additional Information

_No response_