You'll noticeTier: how much it should matter to you
3Useful: my rating, 1 to 5
2Signal: worth watching, 1 to 5
PermissionsArea: what it touches
ImprovementsKind: in v2.1.282,
ImprovementsSection of the release
What
WebFetch is the tool Claude uses to fetch a web page. Before it runs, Claude Code checks your permission rules, the allow and deny entries that decide what Claude may do without asking. This check used to look only at WebFetch domain: rules.
The check now works in two directions:
WebFetch: when extra context is supplied, the URL and prompt are first checked against the rules for reading artifacts, and then against domain: rules.
Artifact reads: the tool that reads artifacts can now be checked against WebFetch allow and deny rules.
Why
A rule you wrote for WebFetch may now also affect artifact reads, and the reverse. If you keep allow or deny rules for either, check that they still do what you expect.
How sure we are
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubtIt is not clear which checks supply the extra context, or exactly which rules cover which tool in each case.
