You'll notice
Useful4 Signal4
Four paths including host credentials and seed-admin can never be written, not even with approval.
What's wrong with this entry?
Anonymous. No account, no email.
What
Writing the host credentials file, writing to memory while memory is paused, writing anywhere under ~/.claude/seed-admin, and writing adopt.json are now unconditional refusals with fixed explanations. These are not prompts you can approve, and no classifier can approve them either.
Details
- Each denial carries a fixed explanation naming why the file is harness-managed.
adopt.jsonis described as a handoff file the harness owns.
Evidence
adopt.json is the bg-fork handoff carrier and is managed by the harness; it cannot be written directly
Strings lifted out of the shipped bundle, so the claim above can be checked against them.