Unclear Exactly which tools these checks cover is not clear.
What
Permission rules decide what Claude may do. A deny rule blocks an action outright, and an ask rule makes Claude ask you first. When a computer offers its tools to a session, Claude Code checks each incoming call against that session's rules. Before, it checked only general deny rules. It now also:
- refuses a call with
denied_by_session_read_denywhen a rule blocking reads of a path matches - refuses a call when its rules cannot be checked at all
- applies ask rules to paths that a tool reads
Why
Tools offered to a session could get around rules that block reading certain files. Those rules now hold for remote calls too.
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubt
Exactly which tools these checks cover is not clear.