{"version":"2.1.300","anchor":"protected-path-denies-for-jobs-daemon-shell-snapshots-and","canonical_anchor":"protected-path-denies-for-jobs-daemon-shell-snapshots-and","heading":"Claude Code blocks the model from writing into its jobs and daemon folders","tier":"notice","area":"Permissions","scope":"individual","heads_up":true,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/protected-path-denies-for-jobs-daemon-shell-snapshots-and","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300","markdown":"### Claude Code blocks the model from writing into its jobs and daemon folders\n\nThe model can no longer write into Claude Code's jobs folder, and some other internal folders are protected when a server-side switch allows it\n\n**Unclear.** It is not clear whether the daemon, shell-snapshots and session-env protections are switched on by default.\n\n**What**\n\nClaude Code keeps its own files in a configuration directory. It now refuses to let the model write into several folders there. Each refusal is a safety check, a point where Claude Code stops a risky action, and the automatic approval system cannot override it.\n\n- `jobs` folder: always protected. The `adopt.json` file there is handled by its own separate rule.\n\n- `daemon` folder and `daemon.json`: protected when a server-controlled switch allows it.\n\n- `shell-snapshots` folder: protected when that same switch allows it.\n\n- `session-env` folder: protected when that same switch allows it.\n\nThe checks also catch Windows short-name versions of these paths and temporary-file lookalikes. The refusal message explains the danger. For the jobs folder it says a file there \"can give a background session more permissions or run a command without asking anyone\". The messages also point the model toward another way to do the task.\n\n**Why**\n\nFiles in these folders can make background sessions or Bash commands run with more privilege than you approved. Blocking writes to them stops the model from widening its own permissions this way.\n\n- Area: Permissions\n- Tier: You'll notice\n- Useful: 1\/5\n- Signal: 2\/5\n- Scope: individual\n- Heads-up: yes"}