Zethian

Claude Code resolves permission rules in a fixed order, so a broad deny with a narrow exception cannot be expressed. permcheck runs as a PreToolUse hook and lets a narrower allow or ask override a matching deny, but only when the deny already covers every…