{"version":"2.1.219","anchor":"auto-memory-rm-allowlist-reworked","canonical_anchor":"auto-memory-rm-allowlist-reworked","heading":"Auto-memory rm allowlist reworked","tier":"notice","area":"Memory","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.219\/e\/auto-memory-rm-allowlist-reworked","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.219","markdown":"### Auto-memory rm allowlist reworked\n\nAuto-memory file deletion now rejects every flag except -f or --force, so fewer commands slip through.\n\n**What**\n\nThe memory-context Bash allowlist for deleting `.md` files is now deny-by-default on flags instead of blocklisting recursive ones.\n\n**Details**\n\n- previously it rejected `--recursive` and `-r*` and allowed other flags; it now rejects every flag except `-f` and `--force`\n- `--` end-of-options is supported\n- each path is validated by a shared helper that requires a `.md` suffix under the memory directory\n- the denial message spells out the rule, and the pre-scan regex for delete-like commands moved to a shared compiled pattern\n\n**Evidence**\n\n`rm (no flags except -f)`\n\n- Area: Memory\n- Names: `-f`, `--force`\n- Tier: You'll notice\n- Useful: 2\/5\n- Signal: 0\/5"}