You'll notice
Publishing an artifact capability now gets refused if it would silently wipe out existing db rules or user scopes
What
When publishing capabilities for an artifact, Claude Code now checks whether a db (database) or user block is being resent without the rules or scopes that were previously stored for it. If so, the publish is refused with a message explaining that the stored rules or scopes would be reset to their defaults, which are open access.
Why
This prevents accidentally opening up access by silently dropping existing security rules or scopes during a republish, catching what would otherwise be a dangerous, invisible change.