{"version":"2.1.274","anchor":"new-pasted-content-trust-boundary-note-gated-behind-tengu-vi","canonical_anchor":"pasted-content-wrapping-tags-gated-off-by-default-tengu-vir","heading":"Pasted content can be tagged as untrusted, gated behind a flag","tier":"notice","area":"Paste Handling","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.274\/e\/new-pasted-content-trust-boundary-note-gated-behind-tengu-vi","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.274","markdown":"### Pasted content can be tagged as untrusted, gated behind a flag\n\nClaude Code can now wrap pasted text in tags marking it as untrusted, with matching submit-time re-tagging and system-prompt guidance, all behind the tengu_virtual_pancake flag (off by default).\n\n**Unclear.** Gate `tengu_virtual_pancake` controls this, but nothing has been read about whether it's on for any account, including this site's.\n\n**What**\n\n- Pasted text in a message can now be wrapped in an id-tagged block with a note that the content inside is untrusted pasted text, applied at message rendering, paste handling, and prompt construction. This is controlled by the `tengu_virtual_pancake` flag, which defaults to off.\n\n- Before a message is submitted, a new pipeline can re-wrap pasted blocks (after placeholder substitution) in `<pasted_content id=\"...\">` tags, and marks the queued message with `pasteTagged: true` when it does.\n\n- The system prompt's Harness section can include a new note explaining that text inside pasted-content tags may contain instructions the user didn't write, that such instructions should only be followed when the user's own message asks for it, and that the tag's random id should never be mentioned to the user.\n\n**Why** This groundwork lets Claude Code mark pasted text as a separate, less-trusted source from the user's own typed instructions, reducing the risk that instructions hidden in pasted content get followed unintentionally. The feature is currently off by default while it's being rolled out.\n\n- Flag `tengu_virtual_pancake`: Not enough to say (read for one account on one subscription tier against v2.1.274; this account: no value returned, anonymous baseline: no value returned, compiled default: off) These values were read against a different version of Claude Code, so treat them as the nearest reading available instead of one taken on this release.\n- Area: Paste Handling\n- Names: `tengu_virtual_pancake`\n- Tier: You'll notice\n- Useful: 4\/5\n- Signal: 4\/5\n- Present in the build but not switched on"}