Follow Discord
Sweep 22 Oct 2026 · 21:04Z Build v2.1.309 528 read Stable v2.1.308 Latest v2.1.309 Next v2.1.309 Feeds RSS JSON llms.txt llms-full.txt Unofficial

Claude Code v2.1.207 ·

Auto Mode Settings Locked to Trusted Sources

Entry
JSON All of v2.1.207
EntryKind: in v2.1.207,
ImprovementsSection of the release

Auto mode rules (autoMode.*) from projectSettings and localSettings are now silently ignored with a warning, since those files are repo-controlled and could be authored by untrusted parties. Only userSettings, flagSettings, and policySettings may set auto mode classifier rules.

Evidence

Source-trust guard in autoMode config loader (search for "only user/flag/managed settings may set classifier rules")

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

How sure we are
One source agreesOne thing we can check says the same as this entry.
Anthropic's release notes agreeChanged auto mode to no longer read autoMode from .claude/settings.local.json (repo-resident); use ~/.claude/settings.json instead

See this entry in the whole of v2.1.207 →

Feedback