test: document DCG auto-approval precedence

Author: navedmerchant

src/core/auto-approval/__tests__/dcg.spec.ts

@@ -25,6 +25,12 @@ describe("Destructive Command Guard auto-approval precedence", () => {
 		})
 	})
 
+	it("does not auto-approve through DCG when global auto-approval is disabled", async () => {
+		const state = { ...baseState, autoApprovalEnabled: false }
+
+		expect(await checkAutoApproval({ state, ask: "command", text: "rm file" })).toEqual({ decision: "ask" })
+	})
+
 	it("requires explicit approval for a DCG-protected command", async () => {
 		expect(
 			await checkAutoApproval({ state: baseState, ask: "command", text: "echo safe", isProtected: true }),

src/core/auto-approval/index.ts

@@ -123,7 +123,9 @@ export async function checkAutoApproval({
 		if (state.alwaysAllowExecute === true) {
 			// Execute commands immediately when DCG allows them. ExecuteCommandTool
 			// marks commands blocked by DCG as protected before reaching this check,
-			// which keeps the explicit user approval prompt for those commands.
+			// which keeps the explicit user approval prompt for those commands. When
+			// enabled, DCG is the authoritative command policy, so Zoo's allow and deny
+			// lists are intentionally bypassed for commands that DCG allows.
 			if (state.destructiveCommandGuardEnabled === true) {
 				return { decision: "approve" }
 			}