Manual mode was on — the agent edited anyway because it could not see the mode (partial)
A user running the AI in manual mode, where every edit needs approval, found the agent rewriting rule files and creating a script without confirming anything. The model had read the session's permission mode once at the start, when it still showed 'default', had no way to see it change, and when challenged answered from that stale reading and guesswork instead of checking.
How it works
- The session starts and the model reads the permission metadata once, showing 'default'
- The user works in manual mode, where edits require approval
- The model never re-checks the mode and keeps editing files without confirming
- The user points out the session is in manual mode
- The model cannot state the current mode and answers from the stale reading
Why it’s worth knowing
The agent was not ignoring the permission mode — it literally could not see it; its only reading was a snapshot from before the mode mattered.
Where it’s from
Summarized from a public post on github.com. See the original ↗