Your CI pipeline uses Claude Code to automate dependency upgrades. You've deployed it with a canUseTool callback that prompts a senior engineer for y/n approval before each Bash command executes. Three weeks in, engineers complain that Claude repeatedly attempts pip install --upgrade <package> --target /usr/local/lib — a path that's safe for the production build image but breaks the isolated CI sandbox. Engineers keep denying the request, and Claude retries with the same command. Logs confirm the denial message is simply "User declined." What change would most effectively resolve this retry loop?