Source Intelligence
Follow Discord

DisclaimerUnofficial, and not affiliated with Anthropic. Nearly all of this is read straight out of what ships: npm bundles, captured prompts, published docs. Anthropic's own notes go in verbatim, marked as theirs. The rest is my reading, and every entry carries the strings behind it. If one looks wrong, vote it down and say why.

← All of v2.1.234 Home All releases ←olderv2.1.233 v2.1.235newer→
Claude Code v2.1.234

Publishing re-verifies the source file between approval and publish

You'll notice
Useful3 Signal2
Artifacts

A file you approve for publishing is re-checked before its bytes are sent, so it can't be swapped.

What

A file you approve for publishing is now pinned and re-checked before its bytes are read, closing the window in which the file could be swapped after you approve and before it is sent.

Details
  • Approval records the file's device, inode, size and nanosecond modification time.
  • At publish the file is reopened refusing symlinks (when the approval saw a non-symlink), the stat is compared, the content read, then the stat taken again to catch a write during the read.
  • A mismatch, a symlink appearing where there was none, or a missing pin aborts with a retry message and the error codes source_changed or source_unverified.
  • Reached whenever a tool-use id is present; the older direct read path remains for network-sourced pins.
Evidence

file_path: the source file changed between approval and publish — retry the publish

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

See this entry in the whole of v2.1.234 →