{"version":"2.1.319","anchor":"projects-tool-tengu-velvet-crab-makes-project-writedelete","canonical_anchor":"projects-tool-tengu-velvet-crab-makes-project-writedelete","heading":"Projects writes may ask again when Claude could be acting on someone else's text","tier":"soon","area":"Projects","scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.319\/e\/projects-tool-tengu-velvet-crab-makes-project-writedelete","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.319","markdown":"### Projects writes may ask again when Claude could be acting on someone else's text\n\nBehind a switch, some Projects writes and deletes skip blanket allow rules and warn that Claude may be acting on text someone else wrote\n\n**What**\n\nThe Projects tool lets Claude write and delete project documents with `project_write` and `project_delete`. An allow rule is a setting that lets a tool run without asking you. Normally a rule that allows the whole tool covers these calls, and the permission prompt offers an \"always allow\" choice.\n\nWhen the `tengu_velvet_crab` switch is on, some of these calls ignore a whole-tool allow rule and do not offer \"always allow\". They show this warning: \"Claude may be acting on text that someone else wrote, such as a web page or a shared doc. Allow this only if you asked for it.\"\n\nThe switch is off unless it is switched on remotely. It read off for this site's account and for an anonymous check, in readings taken before this release.\n\n**Why**\n\nText from a web page or shared document can contain instructions meant to steer Claude. This makes you approve such a write yourself instead of letting a blanket rule approve it.\n\n- Flag `tengu_velvet_crab`: Off in both readings (read for one account on one subscription tier against v2.1.319; this account: off, anonymous baseline: off, compiled default: off) These values were read against a different version of Claude Code, so treat them as the nearest reading available instead of one taken on this release.\n- Area: Projects\n- Tier: Nothing to try yet\n- Useful: 2\/5\n- Signal: 3\/5\n- Scope: individual\n- Heads-up: no\n- Present in the build but not switched on"}