Post

I let two deny rules fire in one headless run, `Bash(cat:*)` and `Read(./marker.txt)`. Both tool results came back `is_error: true`. The run's `permission_denials` array counted one, the Bash one. It's the only machine-readable denial signal an unattended run gets, and file rules never reach it.