You'll noticeTier: how much it should matter to you
3Useful: my rating, 1 to 5
4Signal: worth watching, 1 to 5
Remote ToolsArea: what it touches
ImprovementsKind: in v2.1.248,
What probably matters to youSection of the release
What
The system prompt describing tools that act on an attached machine now says those calls run under that machine's own permission rules, rather than describing the target as files in its project folder. This changes what the model is told about where edits land and which approval prompts apply.
Details
The surrounding preamble, saying that machine's own Claude Code decides what may run there and may ask the user first, is unchanged. Only the per-tool sentences moved.
Evidence
on the user's current files there, under that machine's own permission rules
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
