Keep one folder for settings examples: settings-hipaa.json, managed-mcp-hipaa.json and README-hipaa.md sit beside the existing files, and the settings README links to them.
Docked, the pane no longer pads a blank row of its own above its header: the engine keeps a docked pane's first row for its close mark, and that row is the blank one.
* diff: the dialog opens every file it lists, and says nothing when closed
* diff: the dialog's fetch asks its seat first, and a generated file opens too
* diff: a read started by a move of the selection never rejects unheard
* diff: a test that a moving window reads only its new rows
* sec-default: the system prompt's sections continue past the user tier; the declarations carry prompt.compose
* sec-default: prompt.compose has its own row, a second case where a person's plugin asks first, and the declarations as the event shipped
* sec-default: the two new cases set their several-line hooks apart
* sec-default: a settings deny rule holds over an allow or ask from a plugin the person installed
* sec-default: the tool.check test plugins carry their verdicts in their own bodies
* sec-default: a user-tier link counts as loosening only when it answers looser than it was handed
* sec-default: the README says where the line lands in a plain -p run
* sec-default: a batch listed under prepend may hold a person's plugin, and the line says lift
* sec-default: the README and one doc comment say what the batch fix changed
claude-sonnet-4-5 predates auto mode, so Claude Code fell back to its
default permission mode in the dedupe job. Move it and claude.yml to
claude-sonnet-4-6. The action sets --permission-mode acceptEdits for
@claude mentions and appends the workflow's claude_args after it, so the
--permission-mode auto in claude.yml wins. Drop claude.yml from
EXEMPT_FROM_AUTO_MODE.
The check now also fails when a step in auto mode names a model older than
claude-opus-4-6.
GitHub Actions