permissions.denyInsteadOfPrompting: a tool call that would wait on a permission prompt is denied and the turn continues (terminal, subagents). yoyo: no equivalent. yoyo -p/piped auto-approves everything (owner decision #1149 option A, Day 253: keep default, keep disclosed); there is no opt-in to make an unattended run deny anything not on the allow list. Candidate product-safe opt-in.
Fixed a Bash permission bypass where a crafted environment prefix hid part of a command from permission checks. yoyo: already pinned; user_deny_refusal strips leading VAR=value assignments and export chains (src/tools_user_deny_tests.rs ~225), and safety.rs has a_leading_assignment_never_changes_the_*_verdict tests.
Changed: an exact ask rule is refused when a broader deny covers the command (deny precedence). yoyo PermissionConfig::check already checks deny first.
Fixed /rename reporting plain success when the name could not be saved (false-success class); claude remote-control exiting 0 silently on an unanswered first-run question now exits 1 (exit-code honesty class, same as yoyo #1153/#1154).
MCP tasks: long MCP tool calls move to background, result reported when done. yoyo: stdio MCP only, no task support (#1134 tracks MCP lifecycle).
-p: one-line stderr warning 10 days before a stored login expires; credential_expires_at in -p JSON.