{"version":"2.1.268","anchor":"new-unreadableno-consent-guard-added-to-upload-asset-flow","canonical_anchor":"new-unreadableno-consent-guard-added-to-upload-asset-flow","heading":"New guards deny file\/asset actions when there's no way to ask for consent","tier":"notice","area":"Artifacts","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.268\/e\/new-unreadableno-consent-guard-added-to-upload-asset-flow","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.268","markdown":"### New guards deny file\/asset actions when there's no way to ask for consent\n\nClaude Code now denies uploading or reading local files outside a session's allowed folders when there's no one to ask for approval\n\n**What** Several permission checks were added that deny certain actions outright instead of prompting, specifically in situations (like Cowork sessions) where there is no \"consent surface\" \u2014 no user available to respond to an approval prompt:\n\n- Uploading a local file as an artifact asset is now denied before even building the approval prompt, when there's no read rule for the path, the path looks suspicious or outside the allowed area, and the session has no consent surface.\n\n- A similar early denial was added to another artifact-related action when a consent-surface-dependent value is missing and the session is in the same no-prompt (Cowork) state.\n\n- Two new deny-response builders reject local file reads that fall outside a Cowork session's connected folders, or that can't be examined, explaining that no one can answer the approval card in that session.\n\n**Why** Without these guards, an action needing approval could stall indefinitely in a session with no user present to approve it. Denying up front instead gives a clear, immediate result rather than a silent hang.\n\n- Area: Artifacts\n- Tier: You'll notice\n- Useful: 2\/5\n- Signal: 1\/5"}