{"version":"2.1.251","anchor":"confined-sessions-accept-permissions-only-from-their-own-com","canonical_anchor":"confined-sessions-accept-permissions-only-from-their-own-com","heading":"Confined sessions accept permissions only from their own command line","tier":"internal","area":"Permissions","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.251\/e\/confined-sessions-accept-permissions-only-from-their-own-com","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.251","markdown":"### Confined sessions accept permissions only from their own command line\n\nA confined session ignores permission grants from tools or plans, honoring only its startup flags.\n\n**What**\n\nA session running in a \"confined\" mode now refuses permission grants that arrive through a tool or plan response, logging them instead of applying them. Such a session can only be granted permissions by the flags it was started with.\n\n**Details**\n\n- Both an `allow` permission decision and an allowing permission-request result are discarded.\n- What switches this mode on beyond the evaluation context is not visible in the build.\n\n**Evidence**\n\n`a confined session takes grants only from its command line`\n\n- Area: Permissions\n- Tier: Under the hood\n- Useful: 3\/5\n- Signal: 4\/5"}