You'll noticeTier: how much it should matter to you
4Useful: my rating, 1 to 5
0Signal: worth watching, 1 to 5
PermissionsArea: what it touches
Bug FixesKind: in v2.1.222,
What probably matters to youSection of the release
What
ExitWorktree and the session-exit path only move the permission anchor when the target is already covered, so leaving a worktree cannot broaden what the session is allowed to touch.
Details
the move requires coverage by the session's live launch anchor and witnesses
a record-derived widening is refused and logged instead of applied
Evidence
ExitWorktree: not moving the permission anchor to
Strings lifted out of the shipped bundle, so the claim above can be checked against them.