Under the hoodTier: how much it should matter to you
2Useful: my rating, 1 to 5
4Signal: worth watching, 1 to 5
PermissionsArea: what it touches
Internal ChangesKind: in v2.1.251,
What probably matters to youSection of the release
What
With CLAUDE_CODE_EVAL_CONFINED set, file-read permission checks reject anything outside the set of paths the run was allowed to read, and always-allow rules are honoured only when they came from a command-line argument, so allow rules written in settings files are ignored.
Details
The denial text is source outside the readable set in an evaluation run.
Both paths are off entirely when the variable is unset.
Evidence
source outside the readable set in an evaluation run
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
