Under the hoodTier: how much it should matter to you
2Useful: my rating, 1 to 5
3Signal: worth watching, 1 to 5
PermissionsArea: what it touches
In DevelopmentKind: in v2.1.248,
In DevelopmentSection of the release
The lists exist; the guard that reads them is not in the same code.
What
New lists name config files treated specially, including .npmrc, .envrc, .mcp.json, .claude.json and .pre-commit-config.yaml, along with credential directory paths such as .config/gh and .claude/settings.local.json. Which file-access guard reads these lists is not decided in the same code, so no behaviour change is visible from them alone.
Evidence
.pre-commit-config.yaml
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
How sure we are
One source agreesOne thing we can check says the same as this entry.
Anthropic's release notes agreeFixed /mcp listing a project .mcp.json entry that declares the claude.ai connector type under the trusted "claude.ai" heading; it now…
