Under the hoodTier: how much it should matter to you
3Useful: my rating, 1 to 5
4Signal: worth watching, 1 to 5
PermissionsArea: what it touches
In DevelopmentKind: in v2.1.251,
What probably matters to youSection of the release
What
A session running in a "confined" mode now refuses permission grants that arrive through a tool or plan response, logging them instead of applying them. Such a session can only be granted permissions by the flags it was started with.
Details
Both an allow permission decision and an allowing permission-request result are discarded.
What switches this mode on beyond the evaluation context is not visible in the build.
Evidence
a confined session takes grants only from its command line
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
