diff --git a/pyproject.toml b/pyproject.toml
index 96e7170..be9934b 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -26,3 +26,6 @@ dev = [
 
 [tool.setuptools.packages.find]
 where = ["src"]
+
+[tool.pytest.ini_options]
+norecursedirs = ["reference"]
diff --git a/src/astra/permissions/checker.py b/src/astra/permissions/checker.py
index 9cf8851..7fcf814 100644
--- a/src/astra/permissions/checker.py
+++ b/src/astra/permissions/checker.py
@@ -34,4 +34,6 @@ def check(self, tool_name: str, tool_input: dict[str, Any]) -> PermissionDecisio
             return PermissionDecision.ALLOW
         if tool_name in ALWAYS_ASK_DEFAULT:
             return PermissionDecision.ASK
-        return PermissionDecision.ALLOW
+        # Unknown tools not in ALWAYS_ALLOW or ALWAYS_ASK_DEFAULT require
+        # confirmation in DEFAULT mode rather than silently executing.
+        return PermissionDecision.ASK
diff --git a/src/astra/session/storage.py b/src/astra/session/storage.py
index c65d648..b1b7c89 100644
--- a/src/astra/session/storage.py
+++ b/src/astra/session/storage.py
@@ -24,6 +24,8 @@ def save(self, session_id: str, messages: list[dict], usage: Usage) -> str:
             "usage": {
                 "input_tokens": usage.input_tokens,
                 "output_tokens": usage.output_tokens,
+                "cache_creation_input_tokens": usage.cache_creation_input_tokens,
+                "cache_read_input_tokens": usage.cache_read_input_tokens,
             },
         }
         path.write_text(json.dumps(data, indent=2, default=str))