diff --git a/.github/workflows/claude-code-review.yml b/.github/workflows/claude-code-review.yml
index 59019616f..a9b026bfd 100644
--- a/.github/workflows/claude-code-review.yml
+++ b/.github/workflows/claude-code-review.yml
@@ -53,8 +53,15 @@ jobs:
           # TEMPORARY: expose the full Claude transcript in the Actions log for
           # debugging. Revert to remove once done.
           show_full_output: true
+          # The headless review was blocked on two tools: compound Bash pipelines
+          # (sed/python/grep) and Write (it dropped a check_headings.py helper to
+          # inspect the diff). Default permission mode gates both; Read/Grep/Glob/
+          # Task already run un-prompted. Allowlist them. Safe here (unlike
+          # claude.yml's fork-exposed @claude job): same-repo-only + contents:read
+          # token, so any write is ephemeral and nothing can be pushed.
           claude_args: |
             --max-turns 50
             --model claude-opus-4-8
             --effort max
+            --allowedTools Bash,Write
           # See https://github.com/anthropics/claude-code-action/blob/main/docs/usage.md