{"name":"restricted","slug":"restricted","family":"setting","title":"Settings keys","noun":"settings key","description":"Diffs now explain that withheld hunks are held by a provenance check stricter than read permissions.","description_source":"entry","described_by":{"version":"2.1.238","anchor":"diff-output-says-why-some-hunks-are-withheld-even-when-you-c"},"presence":{"first_seen":null,"removed_in":null,"in_current_build":false,"newest_mined":"2.1.309","builds":0,"mined_builds":150,"first_cited":null},"aliases":[],"entries":[{"version":"2.1.265","anchor":"new-relay-unavailable-statuslatch-state-for-artifact-sync","heading":"New 'relay_unavailable' status\/latch state for artifact sync","line":"Artifact syncing gains a relay_unavailable status, plus a header reporting sandbox network egress restrictions","released_at":"2026-09-08 19:05:16","reason":"found in this entry's text"},{"version":"2.1.265","anchor":"artifact-fetches-now-read-an-x-ccr-sandbox-egress-relay-he","heading":"Artifact fetches now read an x-ccr-sandbox-egress relay header and cache a per-artifact network-egress setting","line":"Artifacts now read a sandbox network-egress setting from a relay header and cache it for 10 minutes","released_at":"2026-09-08 19:05:16","reason":"found in this entry's text"},{"version":"2.1.248","anchor":"new-restricted-session-mode","heading":"New --restricted session mode","line":"New --restricted flag starts a locked-down session with no shell tools and no settings files.","released_at":"2026-08-27 20:35:36","reason":"found in this entry's text"},{"version":"2.1.248","anchor":"restricted-counts-as-a-non-default-sdk-setting","heading":"restricted counts as a non-default SDK setting","line":"Starting a session with restricted now counts as a non-default configuration.","released_at":"2026-08-27 20:35:36","reason":"named in this entry, found in this entry's text"},{"version":"2.1.248","anchor":"permission-setup-takes-a-restricted-flag","heading":"Permission setup takes a restricted flag","line":"Permission setup now accepts a restricted option, though enforcement lives elsewhere.","released_at":"2026-08-27 20:35:36","reason":"found in this entry's text"},{"version":"2.1.238","anchor":"diff-output-says-why-some-hunks-are-withheld-even-when-you-c","heading":"Diff output says why some hunks are withheld even when you can read the file","line":"Diffs now explain that withheld hunks are held by a provenance check stricter than read permissions.","released_at":"2026-08-20 18:01:54","reason":"found in this entry's text"}],"entries_total":6,"docs":[{"source":"api","path":"agents-and-tools\/tool-use\/browser-use-tool","title":"browser-use-tool","documented":false},{"source":"api","path":"api\/beta\/environments","title":"Environments","documented":false},{"source":"api","path":"api\/beta\/environments\/archive","title":"Archive Environment","documented":false},{"source":"api","path":"api\/beta\/environments\/create","title":"Create Environment","documented":false},{"source":"api","path":"api\/beta\/environments\/list","title":"List Environments","documented":false},{"source":"api","path":"api\/beta\/environments\/retrieve","title":"Get Environment","documented":false},{"source":"api","path":"api\/beta\/environments\/update","title":"Update Environment","documented":false},{"source":"api","path":"api\/beta\/messages\/batches\/results","title":"Retrieve Message Batch results","documented":false},{"source":"api","path":"api\/beta\/organization","title":"Organization","documented":false},{"source":"api","path":"api\/beta\/organization\/analytics","title":"Analytics","documented":false}],"docs_total":12,"gates":[],"related":[],"url":"https:\/\/changelogs.core-directive.com\/reference\/setting\/restricted","family_url":"https:\/\/changelogs.core-directive.com\/reference\/setting.json"}