{"version":"2.1.271","anchor":"shell-command-permission-rule-check-swapped-implementation","canonical_anchor":"shell-command-permission-rule-check-swapped-implementation","heading":"Shell command permission-rule check swapped implementation","tier":"internal","area":"Bash Permissions","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.271\/e\/shell-command-permission-rule-check-swapped-implementation","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.271","markdown":"### Shell command permission-rule check swapped implementation\n\nInternal function swap for the check that skips path-restricted commands from whole-tool allow rules\n\n**Unclear.** Whether this changes actual permission behavior or is a pure refactor is not stated.\n\n**What**\n\nA check used when evaluating shell command permission rules now calls a different internal function to determine whether a broad 'allow this whole tool' rule should be ignored for commands that are restricted to specific paths.\n\n**Why**\n\nThis is an internal implementation change to how permission rules are evaluated; the finding does not say whether it alters which commands are allowed or blocked in practice.\n\n- Area: Bash Permissions\n- Tier: Under the hood\n- Useful: 1\/5\n- Signal: 1\/5"}