I've seen something similar. It's hard to get Claude to stop committing by itself after granting it the permission to do so once.