You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
2Signal: worth watching, 1 to 5
PermissionsArea: what it touches
ImprovementsKind: in v2.1.286,
ImprovementsSection of the release
What
Claude Code decides whether an action is allowed by checking permission rules, which are entries in your settings that allow or deny particular actions. In some cases it runs in a mode where it does not honor locally set rules. Previously, in that mode it used no rules at all. Now it still collects deny rules from your settings sources.
In the same mode, sandbox auto-allow is now suspended. A sandbox is a restricted environment that limits what a command can reach, and auto-allow is the behaviour where commands inside it are approved without asking.
Why
Deny rules you have written are now respected in more situations. That includes calls that are served or run remotely, where previously they could have been skipped because the rule list was empty.
How sure we are
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubtIt is not clear which features or kinds of call run in the mode where local rules are not honored.
