The Projects tool lets Claude write and delete project documents with project_write and project_delete. An allow rule is a setting that lets a tool run without asking you. Normally a rule that allows the whole tool covers these calls, and the permission prompt offers an "always allow" choice.
When the tengu_velvet_crab switch is on, some of these calls ignore a whole-tool allow rule and do not offer "always allow". They show this warning: "Claude may be acting on text that someone else wrote, such as a web page or a shared doc. Allow this only if you asked for it."
The switch is off unless it is switched on remotely. It read off for this site's account and for an anonymous check, in readings taken before this release.
Text from a web page or shared document can contain instructions meant to steer Claude. This makes you approve such a write yourself instead of letting a blanket rule approve it.
tengu_velvet_crab Off in both readingsThe flag server returned off for the account this site reads and for the anonymous baseline. A reading of off cannot rule out a rollout these two readings sit outside of.
This account: off · anonymous baseline: off · compiled default in v2.1.319: off
These values were read against a different version of Claude Code, so treat them as the nearest reading available instead of one taken on this release.
Read once, for one account on one subscription tier, against v2.1.319. It isn't a statement about your account. What a flag value here can and cannot tell you
New in this build: tengu_velvet_crab