You'll noticeTier: how much it should matter to you
3Useful: my rating, 1 to 5
3Signal: worth watching, 1 to 5
PermissionsArea: what it touches
ImprovementsKind: in v2.1.248,
ImprovementsSection of the release
What
The filesystem probe that can grant a tool call permission on its own now has its allow result discarded when the call was served from a remote client, so those calls go through the normal rule and ask path instead.
Details
Applied at both the read decision site and the edit decision site.
Non-allow probe outcomes are unaffected.
Evidence
servedCall
Strings lifted out of the shipped bundle, so the claim above can be checked against them.