Under the hood
Logged permission decisions now include a 'surface' field for config-based tool approvals
What
When a tool call is automatically approved because of a setting in configuration, the logged decision record now includes a new surface value in addition to the existing decision and source fields.
Why
This gives more detail in permission logs about where or how a config-based auto-approval occurred, though the finding doesn't specify what values surface can take.
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubt
The finding doesn't say what values `surface` holds or what part of the system it identifies.