{"version":"2.1.223","anchor":"file-upload-is-blocked-under-zdr-as-well-as-hipaa","canonical_anchor":"file-upload-is-blocked-under-zdr-as-well-as-hipaa","heading":"File upload is blocked under ZDR as well as HIPAA","tier":"notice","area":"Elsewhere","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.223\/e\/file-upload-is-blocked-under-zdr-as-well-as-hipaa","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.223","markdown":"### File upload is blocked under ZDR as well as HIPAA\n\nUnder zero data retention, the file-send tool no longer appears at all.\n\n**What**\n\nUnder a zero data retention policy the send-file tool is no longer offered, and the tool now checks the privacy policy itself rather than relying only on its feature gate.\n\n**Details**\n\n- The privacy-policy denial table gained the pair `[\"zdr\", \"allow_send_file\"]` alongside the existing hipaa entry.\n- The user-file-send tool's isEnabled() short-circuits on the policy check before consulting its gate, `Qe(\"tengu_send_user_file\", !0)`, which otherwise defaults to true.\n- Cross-machine file transfer already surfaced a message about provider and privacy configuration; the tool now simply disappears under ZDR.\n\n**Evidence**\n\n`[\"zdr\", \"allow_send_file\"]`\n\n- Flag `tengu_send_user_file`: Not enough to say (read for one account on one subscription tier against v2.1.223; this account: no value returned, anonymous baseline: no value returned, compiled default: on) These values were read against a different version of Claude Code, so treat them as the nearest reading available instead of one taken on this release.\n- Area: Elsewhere\n- Tier: You'll notice\n- Useful: 2\/5\n- Signal: 0\/5"}