You'll notice
Cowork sessions now show permission cards for artifact actions and block reading files outside connected folders since no one is there to approve
What
New machinery renders human-readable permission cards for actions on artifacts, such as uploading, copying, or editing, derived from the reasoning behind a tool's decision. Alongside this, two new checks deny requests to read a local file from outside a Cowork session's connected folders, through a link, or when the file simply can't be read.
Why
In a Cowork session there's no human present to approve an unusual file-access request, so these reads are now refused outright rather than left waiting on an approval that can never come.