DisclaimerUnofficial, and not affiliated with Anthropic. Nearly all of this is read straight out of what ships: npm bundles, captured prompts, published docs. Anthropic's own notes go in verbatim, marked as theirs. The rest is my reading, and every entry carries the strings behind it. If one looks wrong, vote it down and say why.
Bash safety refusals now tell you what to do instead
You'll notice
Useful3Signal2
Permissions
Blocked bash commands now add a next step, naming the directory to run the command from.
What's wrong with this entry?
Anonymous. No account, no email.
What
Two refusals gained a second sentence with an actionable next step. When a wrapper script is placed before a git command, and when env is used with flags Claude Code does not model, the message now names the working directory to run the command from.
Details
Only the message text changed; the same commands are still refused.
Evidence
Run the command without that env flag from
Strings lifted out of the shipped bundle, so the claim above can be checked against them.