You'll noticeTier: how much it should matter to you
3Useful: my rating, 1 to 5
3Signal: worth watching, 1 to 5
PermissionsArea: what it touches
ImprovementsKind: in v2.1.228,
ImprovementsSection of the release
What
Writing to the artifact database from a Cowork session is now a safety check that the automatic permission classifier is not allowed to approve on your behalf. Previously only the first write in a session, and a stricter prompt in plan mode, needed confirmation.
Details
Applies only when the session is a Cowork session; other sessions keep the existing first-write confirmation.
The reason given is that these writes are durable changes to shared state.
Evidence
Artifact database writes from a Cowork session are durable shared-state changes
Strings lifted out of the shipped bundle, so the claim above can be checked against them.