{"version":"2.1.248","anchor":"restricted-refuses-attachments-from-outside-the-working-dire","canonical_anchor":"restricted-refuses-attachments-from-outside-the-working-dire","heading":"--restricted refuses attachments from outside the working directory","tier":"notice","area":"Restricted Mode","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.248\/e\/restricted-refuses-attachments-from-outside-the-working-dire","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.248","markdown":"### `--restricted` refuses attachments from outside the working directory\n\nIn restricted mode, attachments from outside your working directory are rejected up front.\n\n**What**\n\nFile attachments that live outside the working tree are now rejected up front in restricted mode, with the message \"--restricted only sends files from inside it.\" instead of being read and sent.\n\n**Details**\n\n- The check runs before the file is stat'd, so a path outside the tree fails immediately rather than after a filesystem probe.\n- Only applies when Claude Code is launched with `--restricted`.\n\n**Evidence**\n\n`--restricted only sends files from inside it.`\n\n- Area: Restricted Mode\n- Names: `--restricted`\n- Tier: You'll notice\n- Useful: 3\/5\n- Signal: 2\/5"}