Sending a file or message to an unreachable session is denied while asking permission, not silently at send time.
What's wrong with this entry?
SendFile and SendMessage now work out which session you are aiming at while asking for permission, rather than at send time, and deny outright when the target is a Remote Control session that a cloud session cannot reach. If working out the target throws, you get an ask that says so instead of the send quietly proceeding.
- The resolved target is cached against the tool call, so the permission answer and the send agree.
- When peer machines are kept separate, the SendFile prompt now always includes the warning that file contents travel via Anthropic's servers to another machine.
If the recipient is a Remote Control or cloud session, the file contents travel via Anthropic's servers to another machine.
Strings lifted out of the shipped bundle, so the claim above can be checked against them.