Gemini made changes in /plan mode.

[OPS-PIvers]

What happened?

I did have YOLO toggled on previously, but then I switched to plan mode (/plan) which was visually confirmed. I asked for a specific plan, but instead of providing the plan, Gemini made the changes directly.

[ACTION REQUIRED] 📎 PLEASE ATTACH THE EXPORTED CHAT HISTORY JSON FILE TO THIS ISSUE IF YOU FEEL COMFORTABLE SHARING IT.

gemini_bug.json

What did you expect to happen?

When I switch to /plan, I expect to be presented with a plan to approve, deny, or alter prior to any changes being made, even if previously I had been in YOLO.

Client information

• CLI Version: 0.32.1
• Git Commit: e8a57c7
• Session ID: c8f1d502-4d84-44ee-a963-804401430337
• Operating System: linux v20.19.6
• Sandbox Environment: no sandbox
• Model Version: auto-gemini-3
• Auth Type: oauth-personal
• Memory Usage: 951.6 MB
• Terminal Name: xterm.js(6.1.0-beta.168)
• Terminal Background: Gemini CLI [API Error: Model stream ended with empty response text.] #10409
• Kitty Keyboard Protocol: Supported

Login information

No response

Anything else we need to know?

No response

[jerop]

@OPS-PIvers do you have any custom policies that apply to all modes? Could you please send a screenshot of /policies list?

This is the built-in policy for plan mode that enforces read-only, except if you have policy overrides: https://github.com/google-gemini/gemini-cli/blob/main/packages/core/src/policy/policies/plan.toml

[OPS-PIvers]

Here is a screenshot of the entire list of policies. If it's user-error here, let me know what I can do to fix it! I appreciate your quick response. [image: image.png]

…

On Mon, Mar 9, 2026 at 9:35 AM Jerop Kipruto ***@***.***> wrote: *jerop* left a comment (google-gemini/gemini-cli#21709) <#21709 (comment)> @OPS-PIvers <https://github.com/OPS-PIvers> do you have any custom policies that apply to all modes? Could you please send a screenshot of /policies list? This is the built-in policy for plan mode: https://github.com/google-gemini/gemini-cli/blob/main/packages/core/src/policy/policies/plan.toml — Reply to this email directly, view it on GitHub <#21709 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/BA55RUWZNZWRLBPKP47QN6D4P3JDFAVCNFSM6AAAAACWL6GFJ6VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHM2DAMRUGIZTENBZGA> . You are receiving this because you were mentioned.Message ID: ***@***.***>

-- CONFIDENTIALITY NOTICE: If the information in this email relates to an individual student, it is educational data under state and federal law.  Educational data on individual students may not be reviewed, distributed, or copied by any person other than the intended recipient(s) unless otherwise permitted under law.  If you are not the intended recipient, any further review, dissemination, distribution, or copying of this electronic communication or any attachment is prohibited. If you have received an electronic communication in error, you should immediately return it to the sender and delete it from your system.  Thank you for your compliance.

[jerop]

@OPS-PIvers the attachment is missing

[gemini-cli]

Found possible duplicate issues:

• Gemini 3.1 Pro using Shell tool to edit files while in planning mode #21585

If you believe this is not a duplicate, please remove the status/possible-duplicate label.

[jerop]

https://geminicli.com/docs/reference/policy-engine/#approval-modes

The rule will only be active if the CLI is running in one of its specified modes. If a rule has no modes specified, it is always active.

If don't want the rules to apply to Plan mode, you need to specify the modes it should apply to:

[[rule]]
toolName = ...
decision = ...
priority = ...
modes = ["default", "autoEdit"]