Under the hoodTier: how much it should matter to you
2Useful: my rating, 1 to 5
3Signal: worth watching, 1 to 5
PermissionsArea: what it touches
In DevelopmentKind: in v2.1.247,
In DevelopmentSection of the release
What
Building the permission context is now asynchronous, and when the newer storage layout is in use and workspace files are served by the host it computes a strict-persisted-trust value that feeds both the deny rules and the list of additional working directories.
Details
Requires storage version 5 and hostFiles.serving("workspace") returning "host".
In every other configuration the options object is empty and trust is decided exactly as before.
Evidence
strictPersistedTrust
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
