When Claude offers no suggested rule, a session approval for Bash fell back
to a bare `Bash` rule, which allowed every later command for the session,
including ones Auto mode escalated.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>