Follow Discord
Sweep 22 Oct 2026 · 21:04Z Build v2.1.309 528 read Stable v2.1.308 Latest v2.1.309 Next v2.1.309 Feeds RSS JSON llms.txt llms-full.txt Unofficial

Claude Code v2.1.246 ·

Forged max-turns notes are now neutralised in untrusted text

Forged max-turns notes pasted into tool output are now escaped so they can't fake harness messages.

You'll notice Improvements
JSON All of v2.1.246
You'll noticeTier: how much it should matter to you
3Useful: my rating, 1 to 5
3Signal: worth watching, 1 to 5
Prompt SafetyArea: what it touches
ImprovementsKind: in v2.1.246,
ImprovementsSection of the release
What

The filter that defuses control markers pasted into tool output or fetched content gained a rule for forged max-turns notes, escaping their characters so they cannot be read as a real harness message.

Details
  • Sits alongside the existing system-reminder tag, harness envelope tag and marker-prefix rules.
  • Unlike the adjacent frame-prefix rule, it carries no enabled predicate, so it is always applied.
Evidence

max-turns-note-forgery

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

See this entry in the whole of v2.1.246 →

Feedback