You'll noticeTier: how much it should matter to you
1Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
WindowsArea: what it touches
ImprovementsKind: in v2.1.323,
ImprovementsSection of the release
Unclear Whether the remote switch behind this refusal is on by default is not known.
What
Claude Code lets some read-only commands run without asking you. On Windows, these commands no longer get that treatment when an argument tells them to read a list of file paths from another file:
sha256sum, sha1sum, md5sum with --check
wc and du with --files0-from
strings with an @file argument
This refusal sits behind a remote switch. A remote switch is a setting Anthropic can turn on or off from its servers.
One read-only command check is also stricter now about arguments that look like flags or start with +. Matching commands against your permission rules has new logic for comparing the start of a command.
Why
This closes a gap on Windows. A command that looked read-only could have been pointed at a list of other files and read them without asking you.
How sure we are
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubtWhether the remote switch behind this refusal is on by default is not known.
Anthropic's release notes agreeChanged a /skill or @file typed between two files picked in claude.ai or the desktop app, or after a picked file and a link, to no longer…
