{"version":"2.1.248","anchor":"four-files-are-now-flatly-off-limits-to-writes","canonical_anchor":"four-files-are-now-flatly-off-limits-to-writes","heading":"Four files are now flatly off-limits to writes","tier":"notice","area":"Permissions","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.248\/e\/four-files-are-now-flatly-off-limits-to-writes","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.248","markdown":"### Four files are now flatly off-limits to writes\n\nFour paths including host credentials and seed-admin can never be written, not even with approval.\n\n**What**\n\nWriting the host credentials file, writing to memory while memory is paused, writing anywhere under `~\/.claude\/seed-admin`, and writing `adopt.json` are now unconditional refusals with fixed explanations. These are not prompts you can approve, and no classifier can approve them either.\n\n**Details**\n\n- Each denial carries a fixed explanation naming why the file is harness-managed.\n- `adopt.json` is described as a handoff file the harness owns.\n\n**Evidence**\n\n`adopt.json is the bg-fork handoff carrier and is managed by the harness; it cannot be written directly`\n\n- Area: Permissions\n- Tier: You'll notice\n- Useful: 4\/5\n- Signal: 4\/5"}