What probably matters to youSection of the release
What
A host is a program that runs Claude Code and controls it with requests. One of those requests, read_file, asks Claude Code to read a file. It now accepts an as_written option, which looks the file up by the path exactly as Claude wrote it.
This works only when the host supplies the list of places those paths come from.
Any refusal comes back with a single error code, read_denied.
Files opened this way go through a stricter path check, which refuses links whose target climbs out of the allowed area.
Why
Hosts can show or fetch a file by the path Claude used, while the usual safety checks on file access still apply.
