The One Permission Mode Reserved for Isolated Environments

Claude Code's bypassPermissions mode runs every action — file edits, shell commands, network calls — with no per-action check at all: no classifier, no prompt, nothing.

According to Claude Code's own documentation, where is this mode actually meant to be used?