The Grok Bot card said the grant applied to every Bot, and hours later it covered a folder delete. I couldn't tell from your test whether "always allow" was tied to that first exact command or to running commands in general. Did the settings show you anything about which one it was?