You'll notice
Useful4 Signal4
Remote sessions no longer get free read access to memory, tasks and teams files.
What's wrong with this entry?
Anonymous. No account, no email.
What
Reads of agent memory files, auto memory files, the tasks directory, the teams directory and bundled skill reference files were previously allowed without a permission check. When the request comes from a remote surface, those shortcuts are now skipped and the read goes through the normal permission flow.
Details
- Gated on a per-request flag marking the caller as a remote surface; local sessions keep the fast paths.
Evidence
Agent memory files are allowed for reading
Strings lifted out of the shipped bundle, so the claim above can be checked against them.