{"version":"2.1.251","anchor":"evaluation-runs-get-narrowed-permissions","canonical_anchor":"evaluation-runs-get-narrowed-permissions","heading":"Evaluation runs get narrowed permissions","tier":"internal","area":"Permissions","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.251\/e\/evaluation-runs-get-narrowed-permissions","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.251","markdown":"### Evaluation runs get narrowed permissions\n\nIn confined evaluation runs, allow rules from settings files are ignored; only CLI ones count.\n\n**What**\n\nWith `CLAUDE_CODE_EVAL_CONFINED` set, file-read permission checks reject anything outside the set of paths the run was allowed to read, and always-allow rules are honoured only when they came from a command-line argument, so allow rules written in settings files are ignored.\n\n**Details**\n\n- The denial text is `source outside the readable set in an evaluation run`.\n- Both paths are off entirely when the variable is unset.\n\n**Evidence**\n\n`source outside the readable set in an evaluation run`\n\n- Area: Permissions\n- Names: `CLAUDE_CODE_EVAL_CONFINED`\n- Tier: Under the hood\n- Useful: 2\/5\n- Signal: 4\/5"}