{"version":"2.1.281","anchor":"managed-setting-builtintoolpolicy-ask-session-value-now-d","canonical_anchor":"managed-setting-builtintoolpolicy-ask-session-value-now-d","heading":"Managed setting builtinToolPolicy: \"ask-session\" value now declares a minimum app version","tier":"internal","area":"Managed Settings","url":"https:\/\/changelogs.core-directive.com\/v\/2.1.281\/e\/managed-setting-builtintoolpolicy-ask-session-value-now-d","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.281","markdown":"### Managed setting builtinToolPolicy: \"ask-session\" value now declares a minimum app version\n\nThe \"ask-session\" value of the builtinToolPolicy managed setting now declares it is available from app version 1.40609.0\n\n**Unclear.** The finding does not say which app the version `1.40609.0` refers to, or how this relates to `\"ask-session\"` being rewritten to `\"ask\"`.\n\n**What**\n\n`builtinToolPolicy` is a managed setting: an administrator uses it to set how Claude Code's built-in tools are allowed to run. The setting's definition now says its `\"ask-session\"` value needs at least version `1.40609.0`.\n\nThe fail-closed value is unchanged. \"Fail-closed\" means the value used when nothing valid is set, and it is still `\"ask\"` for every built-in tool.\n\n**Why**\n\nAdministrators who set `\"ask-session\"` should expect it to take effect only from version `1.40609.0` onward. Every other case still falls back to asking.\n\n- Area: Managed Settings\n- Names: `builtinToolPolicy`\n- Tier: Under the hood\n- Useful: 2\/5\n- Signal: 2\/5"}