{"version":"2.1.274","anchor":"public-artifacts-from-another-org-are-now-hard-blocked","canonical_anchor":"public-outside-org-artifact-reads-now-explicitly-gated-and","heading":"Public artifacts from outside your organization are now denied by default unless approved","tier":"notice","area":"Artifacts","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.274\/e\/public-artifacts-from-another-org-are-now-hard-blocked","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.274","markdown":"### Public artifacts from outside your organization are now denied by default unless approved\n\nReading or writing a public artifact from outside your current organization is now blocked unless a person has approved it\n\n**Unclear.** Whether tengu_cobalt_plinth_sedge governs this specific behavior isn't stated, and no reading of it has been taken under this release.\n\n**What**\n\n- A new \"public_unasked\" reason code and reject path deny reading a public artifact from outside a user's organization unless a person has approved it, meaning no fetch happens at all without approval; a separate \"tokenless\" public-read path is gated the same way.\n\n- A new deny check fires whenever an artifact's `outsideOrgReader` flag is set: any read or write against a public artifact from outside the user's current organization is denied outright, with a message explaining that nothing in the session can reach it.\n\n- New helpers read a cached, account\/organization-scoped \"artifact roster\" to track approvals, and a dedicated message supplies the refusal text shown when fetching a public artifact from outside the user's organization and nobody has approved it.\n\n**Why**\n\nThis stops artifacts belonging to other organizations from being silently read or modified, requiring explicit human approval first.\n\n- Flag `tengu_cobalt_plinth_sedge`: Off by default, switched on for this account (read for one account on one subscription tier against v2.1.274; this account: on, anonymous baseline: on, compiled default: off) These values were read against a different version of Claude Code, so treat them as the nearest reading available instead of one taken on this release.\n- Area: Artifacts\n- Tier: You'll notice\n- Useful: 3\/5\n- Signal: 3\/5"}