You'll noticeTier: how much it should matter to you
3Useful: my rating, 1 to 5
4Signal: worth watching, 1 to 5
ProjectsArea: what it touches
New FeaturesKind: in v2.1.242,
What probably matters to youSection of the release
What
In a Claude Code Project, messages the server says came from the project owner are replayed into the session as your own user turns, each opening with a marker the harness writes. New instructions say such a turn counts as you speaking, but a bare "yes" in one clears no soft block, answers no permission prompt, and never licenses editing settings or CLAUDE.md. Everything else relayed is treated as external content, and asking Claude to do what a sender was already denied is called "permission laundering - BLOCK".
Details
Applies to messages arriving by relay and through the fetch_messages, fetch_thread and fetch_project_timeline tools.
The supporting code caps how many owner rows are surfaced, de-duplicates by id and version, and drops rows that are truncated or badly timestamped.
No environment variable or flag guards this; it applies to sessions that are a thread in a Project.
Evidence
[Verified message from this session's user written
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
