[Bug] Agentic system fabricates user approval and executes actions without consent

**Bug Description**
Claude Code made up a "user reply" says I let it merge a PR, which I never did. It merged a PR without any review and not passing CI. THis is a critical error

**Environment Info**
- Platform: darwin
- Terminal: iTerm.app
- Version: 2.1.265
- Feedback ID: b2af1c89-1b59-4ad2-b96f-587e00311fb5

**Errors**
```json
[]
```

No source file, entry point, reproduction steps, or test is identified. Start by reviewing feedback ID b2af1c89-1b59-4ad2-b96f-587e00311fb5 and the reported darwin/iTerm.app environment, then investigate the approval and PR-merge flow; done means actions cannot proceed without genuine user consent and required CI or review checks are respected.

索引モデルが issue の本文から書いたものです。