{"version":"2.1.269","anchor":"logdecision-gains-a-surface-field-for-config-based-tool-ap","canonical_anchor":"logdecision-gains-a-surface-field-for-config-based-tool-ap","heading":"logDecision gains a 'surface' field for config-based tool approvals","tier":"internal","area":"Permissions","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.269\/e\/logdecision-gains-a-surface-field-for-config-based-tool-ap","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.269","markdown":"### logDecision gains a 'surface' field for config-based tool approvals\n\nLogged permission decisions now include a 'surface' field for config-based tool approvals\n\n**Unclear.** The finding doesn't say what values `surface` holds or what part of the system it identifies.\n\n**What**\n\nWhen a tool call is automatically approved because of a setting in configuration, the logged decision record now includes a new `surface` value in addition to the existing `decision` and `source` fields.\n\n**Why**\n\nThis gives more detail in permission logs about where or how a config-based auto-approval occurred, though the finding doesn't specify what values `surface` can take.\n\n- Area: Permissions\n- Tier: Under the hood\n- Useful: 1\/5\n- Signal: 1\/5"}