Yes, furthermore in practice auto mode does not appear to provide anything approaching deterministic gating:

"Measuring the Permission Gate: A Stress-Test Evaluation of Claude Code's Auto Mode" https://arxiv.org/abs/2604.04978

(Shared by hkalbert71 the other day in: https://news.ycombinator.com/item?id=50387838)