Claude Code deny list stops command prompts

Claude Code's enforced deny rules block commands completely, but only work in Auto mode. A settings.json deny list can block destructive commands like git push --force and rm -rf, while ask rules still prompt for approval. Deny rules work even in bypassPermissions mode.