Claude Code checks permission rules in a fixed order – deny, ask, and then allow. If a command matches a deny rule, Claude ...