{"version":"2.1.248","anchor":"path-heuristics-no-longer-auto-allow-remotely-served-tool-ca","canonical_anchor":"path-heuristics-no-longer-auto-allow-remotely-served-tool-ca","heading":"Path heuristics no longer auto-allow remotely served tool calls","tier":"notice","area":"Permissions","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.248\/e\/path-heuristics-no-longer-auto-allow-remotely-served-tool-ca","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.248","markdown":"### Path heuristics no longer auto-allow remotely served tool calls\n\nRemotely served tool calls no longer get auto-allowed by path guessing; they hit normal rules.\n\n**What**\n\nThe filesystem probe that can grant a tool call permission on its own now has its `allow` result discarded when the call was served from a remote client, so those calls go through the normal rule and ask path instead.\n\n**Details**\n\n- Applied at both the read decision site and the edit decision site.\n- Non-allow probe outcomes are unaffected.\n\n**Evidence**\n\n`servedCall`\n\n- Area: Permissions\n- Tier: You'll notice\n- Useful: 3\/5\n- Signal: 3\/5"}