Unverified50% confidenceOpinionExact time
"Allow read_file" is not a valid policy; "only allow under /tmp/run-{id}/, and only allow the first twenty calls" is.
1
Sources
50%
Confidence
Long-term
Relevance
10/15/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedIn auto mode, a one-time prompt will appear before reading files outside the working directory for the first time, and users can block such reads via permissions.blockReadsOutsideWorkingDirectories.61% similarUnverifiedWhen entering /loop without any content, it reads loop.md or a built-in default prompt.58% similarUnverifiedFixed an issue where file permission rules containing uncompilable patterns (such as an unclosed [) caused all file editing operations to fail due to invalid regular expressions; such deny rules now fall back to guarding only the literal path56% similarUnverifiedIn the OpenCode official documentation, both the .env protection example and the company.guard example register an execute.before hook only for the read tool, and do not intercept the behavior of reading files via shell commands (such as cat).55% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1037504API
curl https://kongchang.com/api/v1/knowledge/claims/1037504MCP
get_claim(id=1037504)