Under the hood
Bootstrap config parsing now fails closed on bad keys instead of passing them through.
The managed-config bootstrap parser has been reworked to fail closed: keys that fail validation are "stood in" with a safe default (via onFailClosed/standInFailClosed) rather than passed through. It also reports structured deprecation warnings via describeDeprecation, returns additional sentKeys and issueDetails fields, and distinguishes reader channels such as desktop from others via isReadBy/getFieldMeta.
One source agreesOne thing we can check says the same as this entry.
Anthropic's release notes agree
Fixed Edit/Write/Read permission rules whose path contains parentheses being dropped as invalid or ignored by the Bash sandbox, which left…