You'll noticeTier: how much it should matter to you
4Useful: my rating, 1 to 5
4Signal: worth watching, 1 to 5
PermissionsArea: what it touches
ImprovementsKind: in v2.1.238,
What probably matters to youSection of the release
What
Reads of agent memory files, auto memory files, the tasks directory, the teams directory and bundled skill reference files were previously allowed without a permission check. When the request comes from a remote surface, those shortcuts are now skipped and the read goes through the normal permission flow.
Details
Gated on a per-request flag marking the caller as a remote surface; local sessions keep the fast paths.
Evidence
Agent memory files are allowed for reading
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
