These are every chat's. Claude's permissions stack, each layer more particular than the one before: the CLI's own settings, then the carabiner's (a session: block in its claude.yaml), then these, then a project's, then a chat's. The most particular mode wins; the allow lists add up, unless a project or a chat says not to inherit. An Always answered for every chat lands on this list (for this chat or this project, it is kept there). Kept with your chats, not in the yaml.