You'll notice
Useful3 Signal4
Your always-allowed command list can no longer grow while an injected event is being delivered.
What's wrong with this entry?
Anonymous. No account, no email.
What
The permission context used when checking a tool call gained a flag that marks a poll-event or empty dispatch delivery. While it is set, the layers that would normally inject or replace the list of always-allowed commands leave the context untouched, so the allowlist cannot grow during that delivery.
Details
- Applies on every build; no setting turns it on or off.
Evidence
pollEventDeliveryGuard
Strings lifted out of the shipped bundle, so the claim above can be checked against them.