Source Intelligence

DisclaimerUnofficial, and not affiliated with Anthropic. Nearly all of this is read straight out of what ships: npm bundles, captured prompts, published docs. Anthropic's own notes go in verbatim, marked as theirs. The rest is my reading, and every entry carries the strings behind it. If one looks wrong, vote it down and say why.

All of v2.1.218 Home All releases olderv2.1.217 v2.1.219newer
Claude Code v2.1.218

Forked Skill Resume Security Hardened

When a session resumes and picks up a forked-skill agent, the resumption path now validates:

  1. The scoping record file (.forked-skill.json) must be present and parseable
  2. The record must name the same skill as the agent's task record
  3. For cold restarts, a provenance-marker witness (.forked-skill.marker.json) must also be present and corroborate the fork identity

If any check fails, the agent refuses to resume and logs a clear error rather than running without its intended permission scoping. This prevents forked-skill agents from running with wrong or missing permission boundaries after a restart.

Evidence

Resume validation guards (search for "refusing to resume it without the skill's permission scoping")

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

See this entry in the whole of v2.1.218 →