Memory-file prefetching now also respects the block-outside-directory-reads setting
When Claude Code warms up its memory context by prefetching files from a memory directory, it now checks the blockReadsOutsideWorkingDirectories setting (which makes file tools refuse reads outside your designated working directories) before reading a candidate file. If that setting is on, it verifies the file is actually inside the working directory first. If that check itself fails with an error, the read is blocked rather than allowed.
This closes a gap where memory prefetching could have read files outside your working directory even with blockReadsOutsideWorkingDirectories turned on, and it errs on the side of blocking when it can't be sure.
The entry above is what we published on the day. These lines were added later, as Anthropic's own pages caught up, and they sit beside the original rather than replacing it.
When you set it in a project's `.claude/settings.json` or `.claude/settings.local.json`, Claude Code honors it under the same [workspace trust rule as hooks in settings files](/docs/en/permissions#what-runs-before-you-trust-a-folder). Whil…memory see the edit
A small documentation edit on How Claude remembers your project touched a line naming blockReadsOutsideWorkingDirectories after this was…