Yes, "don't ask again" adds an allow rule. Check .claude/settings.local.json for something like Bash(git push:*) in allow and remove it.
Then make it a hard rule instead of a wish, in .claude/settings.json:
{
"permissions": {
"deny": ["Bash(git push:*)", "Bash(git commit:*)"]
}
}Deny rules win over allow rules, and unlike CLAUDE.md they are enforced, not suggested. /permissions shows what's active.
Bash(git push:*)in settings.local.json, from my own click. Removed and added the deny. Thanks! kimberly_j · edited