Hey @Leland_Hepworth
That Always Run path shouldn’t widen to bare git (or Remove-Item) without unblocking the redirected command. We’ve let the team know.
Workaround for now: approve those redirected commands one-shot, and remove any bare git entry if Always Run added one. Same surface as this related thread (different trigger). Docs: Run Modes.