{"version":"2.1.211","anchor":"settings-local-json-ownership-verification-before-canonicali","canonical_anchor":"settings-local-json-ownership-verification-before-canonicali","heading":"settings.local.json Ownership Verification Before Canonicalization","tier":null,"area":null,"scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.211\/e\/settings-local-json-ownership-verification-before-canonicali","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.211","markdown":"### settings.local.json Ownership Verification Before Canonicalization\n\n**What**\n\nBefore relocating the local settings consent store to the canonical git repository root, Claude now verifies via POSIX uid semantics that the user owns the root directory, its `.git` entry, and its `.claude` entry.\n\n**Details**\n\n- If any of those entries are owned by a different user, the store stays at the current working directory (the pre-canonicalization behavior) and a warning is logged.\n- On platforms without uid semantics (Windows), canonicalization is skipped and logged as POSIX-only.\n- Protects against shared-repository scenarios where a foreign-owned repo root could have its consent state hijacked.\n\n**Evidence**\n\nOwnership check log messages (search for `\"localSettings: not canonicalizing the consent store to\"`)"}