Claude Code's fixed permission precedence has no way to express every narrow exception. Learn how permcheck uses containment-based carve-outs, and where its protection ends.