{"version":"2.1.247","anchor":"a-new-protected-claude-seed-admin-directory-with-nothing-yet","canonical_anchor":"a-new-protected-claude-seed-admin-directory-with-nothing-yet","heading":"A new protected ~\/.claude\/seed-admin directory, with nothing yet writing to it","tier":"notice","area":"Sandbox","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.247\/e\/a-new-protected-claude-seed-admin-directory-with-nothing-yet","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.247","markdown":"### A new protected `~\/.claude\/seed-admin` directory, with nothing yet writing to it\n\nWrites under a new seed-admin folder are hard-denied for everyone, though what fills it is off.\n\n**What**\n\nClaude Code now hard-denies all writes under `~\/.claude\/seed-admin`, both for the model (a safety refusal that cannot be approved away) and in the sandbox, which lists the directory as unwritable alongside `jobs` and `daemon`. The only thing that fills it is the cloud-session upload path, reached from \"Continue this session in the cloud\" in the Teleport menu, which is behind `tengu_teleport_send_to_cloud` and compiles in as off. The guard rails are live for everyone; the feature they guard is not, absent a server value.\n\n**Details**\n\n- The upload stages one private git directory per process there and refuses to run if the directory is not a plain directory owned by you, or if it lies inside the work tree.\n- Denies also cover paths reached through a resolved symlink of the config home.\n\n**Evidence**\n\n`~\/.claude\/seed-admin holds the private git directories of cloud-session uploads and is managed by Claude Code; it cannot be written directly`\n\n- Flag `tengu_teleport_send_to_cloud`: Off in both readings (read for one account on one subscription tier against v2.1.247; this account: off, anonymous baseline: off, compiled default: not a boolean we can read)\n- Area: Sandbox\n- Names: `~\/.claude\/seed-admin`, `tengu_teleport_send_to_cloud`\n- Tier: You'll notice\n- Useful: 2\/5\n- Signal: 4\/5\n- Present in the build but not switched on"}