Tip: Pin Your Permission Mode Before August 14 — `defaultMode` and `disableAutoMode` Are the Admin Escape Hatches
If you script Claude Code headlessly or run it in CI, the August 14 auto-mode default will change behavior in existing automation without a version bump. Individual users flip modes with Shift+Tab (or the desktop mode dropdown), and pinned defaults are left untouched by the migration; admins can force a different default with `defaultMode` in managed settings or turn the feature off entirely with `disableAutoMode`. Auto mode also introduces customizable 'hard denies' that no approval can override, data-access rules distinguishing secrets from confidential data, git-status checks before destructive commands, and API-side prompt-injection probes — all worth reviewing before they arrive unannounced.
Source
↳ Follow the thread