Source Intelligence
Follow Discord

DisclaimerUnofficial, and not affiliated with Anthropic. Nearly all of this is read straight out of what ships: npm bundles, captured prompts, published docs. Anthropic's own notes go in verbatim, marked as theirs. The rest is my reading, and every entry carries the strings behind it. If one looks wrong, vote it down and say why.

← All of v2.1.251 Home All releases ←olderv2.1.250
Claude Code v2.1.251

Evaluation runs get narrowed permissions

Under the hood
Useful2 Signal4
Permissions not in their notes

In confined evaluation runs, allow rules from settings files are ignored; only CLI ones count.

CLAUDE_CODE_EVAL_CONFINED
What

With CLAUDE_CODE_EVAL_CONFINED set, file-read permission checks reject anything outside the set of paths the run was allowed to read, and always-allow rules are honoured only when they came from a command-line argument, so allow rules written in settings files are ignored.

Details
  • The denial text is source outside the readable set in an evaluation run.
  • Both paths are off entirely when the variable is unset.
Evidence

source outside the readable set in an evaluation run

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

Related

Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.

See this entry in the whole of v2.1.251 →