Under the hood
Useful3 Signal4
A confined session ignores permission grants from tools or plans, honoring only its startup flags.
What's wrong with this entry?
Anonymous. No account, no email.
What
A session running in a "confined" mode now refuses permission grants that arrive through a tool or plan response, logging them instead of applying them. Such a session can only be granted permissions by the flags it was started with.
Details
- Both an
allowpermission decision and an allowing permission-request result are discarded. - What switches this mode on beyond the evaluation context is not visible in the build.
Evidence
a confined session takes grants only from its command line
Strings lifted out of the shipped bundle, so the claim above can be checked against them.