You'll notice
Useful3 Signal3
Remotely served tool calls no longer get auto-allowed by path guessing; they hit normal rules.
What's wrong with this entry?
Anonymous. No account, no email.
What
The filesystem probe that can grant a tool call permission on its own now has its allow result discarded when the call was served from a remote client, so those calls go through the normal rule and ask path instead.
Details
- Applied at both the read decision site and the edit decision site.
- Non-allow probe outcomes are unaffected.
Evidence
servedCall
Strings lifted out of the shipped bundle, so the claim above can be checked against them.