Teach Claude Code's auto mode about your infrastructure, and don't drop the $defaults

Sun, 18 Oct 2026 16:03:00 +0000

Since v2.1.283 auto mode is the built-in starting permission mode for interactive terminal and VS Code sessions, and by default it trusts exactly two things: the directory you launched in and that repo’s configured remotes. Everything else counts as external. So the first time Claude pushes a fix to a sibling repo in your company’s GitHub org, or writes a build artefact to your team’s bucket, the classifier blocks it, and it’s right to by its own lights. It has no idea those destinations are yours.

Settings on Tokenise

Teach Claude Code's auto mode about your infrastructure, and don't drop the $defaults