[BUG] Trust prompt appears on every launch despite selecting "Yes, proceed"

Resolved 💬 3 comments Opened Oct 10, 2025 by ErikEvenson Closed Oct 13, 2025

Preflight Checklist

  • [x] I have searched existing issues and this hasn't been reported yet
  • [x] This is a single bug report (please file separate reports for different bugs)
  • [x] I am using the latest version of Claude Code

What's Wrong?

Trust prompt appears on every launch despite selecting "Yes, proceed"

Environment:

  • OS: macOS 24.5.0 (Darwin Kernel Version 24.5.0)
  • Claude Code version: 2.0.13 (Claude Code)
  • Working directory: /Users/eevenson (user home directory)

Current Behavior:
The trust verification prompt appears on every launch of Claude Code, even after selecting "1. Yes, proceed" in previous sessions:

Do you trust the files in this folder?

/Users/eevenson

Claude Code may read, write, or execute files contained in this directory...

Execution allowed by:
  • .claude/settings.local.json

❯ 1. Yes, proceed
  2. No, exit

What Should Happen?

Expected Behavior:
Trust decision should persist after first confirmation. Subsequent launches in the same directory should not prompt again.

Configuration:

  • .claude/settings.local.json exists with permissions configured
  • Config directory ~/.config/claude-code/ exists with proper permissions (755)
  • No trust state files found in ~/.claude/ or ~/.config/claude-code/

Impact:

  • Requires manual selection on every launch
  • Friction for legitimate workflows in trusted directories
  • Trust state appears not to be persisted anywhere

Error Messages/Logs

Steps to Reproduce

Steps to Reproduce:

  1. Launch Claude Code in /Users/eevenson (has .claude/settings.local.json)
  2. Select "1. Yes, proceed"
  3. Exit Claude Code
  4. Launch again in same directory
  5. Trust prompt appears again

Additional Context:
According to security docs, trust verification should happen on "first-time codebase runs" - not every run.

Workaround:
Using -p flag disables trust verification, but this removes the security feature entirely rather than fixing persistence.

Claude Model

None

Is this a regression?

Yes, this worked in a previous version

Last Working Version

_No response_

Claude Code Version

2.0.13 (Claude Code)

Platform

Anthropic API

Operating System

macOS

Terminal/Shell

Terminal.app (macOS)

Additional Information

_No response_

View original on GitHub ↗

This issue has 3 comments on GitHub. Read the full discussion on GitHub ↗