What probably matters to youSection of the release
What
claude ultrareview now accepts --trust-workspace. Normally Claude Code may ask whether you trust a folder before it works in it. With this option it trusts the current folder for that one run without asking, which is meant for scripts and CI (automated build systems where nobody is there to answer a prompt).
The option takes no value. If you put a value after it, the run stops with "Ultrareview did not start" and an error saying the option takes no value.
Without the option, the command may still ask about trust. Whether it does also depends on CLAUDE_CODE_DISABLE_ULTRAREVIEW_TRUST_CHECK and on a setting Claude Code receives from Anthropic's servers.
The self-hosted runner already had its own --trust-workspace [bool] option. This is the same name added to the ultrareview command.
Why
Reviews can now run unattended in CI. Trusting a folder also means Claude Code honours that folder's git configuration and project settings, so use the option only on code you are willing to trust.
--trust-workspaceDeploy self-hosted environments to productionmodified, high confidenceThe guard runs regardless of [`--trust-workspace`](/docs/en/self-hosted-environments-reference#runner-cli-flags), and doesn't cover repository hooks, `.mcp.json`, or Bash rules; see [Permissions and tool approval](/docs/en/self-hosted-envi…see the edit
--trust-workspaceSelf-hosted environments referencemodified, high confidence| `--trust-workspace [bool]` | `SELF_HOSTED_RUNNER_TRUST_WORKSPACE` | on | Seed persisted trust for each session's repository paths so repo-committed `permissions.allow` and `additionalDirectories` are honored. Set `false` to drop repo-com…see the edit
How sure we are
Two sources agreeTwo things we can check say the same as this entry.
Anthropic's documentation agrees--trust-workspace on Deploy self-hosted environments to production
Anthropic's release notes agreeChanged claude ultrareview to require workspace trust: it asks on a terminal, else refuses; scripts pass --trust-workspace, which takes no…
The name it cites is new in this buildNew in this build: --trust-workspace