What
Claude Code has an internal table controlling which categories of safety checks can bypass the normal permission system (referred to internally as the "immune system") or get routed to an automatic classifier instead of asking you directly. A new category, claudeSettingsFile, has been added to this table. Two new properties, hostPersonOnly and localProjectionOnly, were also added to every entry in the table, and claudeSettingsFile is the only entry currently marked hostPersonOnly: true.
Why
This adds a distinct safety category specifically for changes to Claude's own settings file, and restricts it so only the host person (rather than, say, an automated actor) can act on it — tightening control over who can modify Claude Code's configuration.
Names in the bundleclaudeSettingsFile
Documented inclaude-code/monitoring-usage