Under the hoodTier: how much it should matter to you
2Useful: my rating, 1 to 5
3Signal: worth watching, 1 to 5
PermissionsArea: what it touches
ImprovementsKind: in v2.1.248,
ImprovementsSection of the release
What
Permission rules sent to the host are now assembled into a block of allow, soft-deny, hard-deny and environment lists. When the caller is not permitted, the allow and environment lists are omitted entirely, and nothing is sent at all when every list is empty.
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
How sure we are
One source agreesOne thing we can check says the same as this entry.
Anthropic's release notes agreeAdded --restricted (or CLAUDE_CODE_RESTRICTED=1): removes the built-in tools that run commands or code and WebFetch (unless named in…
