You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
2Signal: worth watching, 1 to 5
Managed SettingsArea: what it touches
New FeaturesKind: in v2.1.232,
New FeaturesSection of the release
What
A gateway policy that inherits from the catch-all entry (match: {}) now merges its desktop overlay semantically instead of overwriting keys wholesale, so a stricter base cannot be loosened by accident.
Details
disabledBuiltinTools from the base and the role entry are unioned rather than replaced.
builtinToolPolicy is merged so a base value other than allow survives a looser role value.
The merged result is diffed and the changed keys are logged, matching what the cli half of a policy already did.
Evidence
desktop overlay after merge with catch-all base
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
