Unverified50% confidenceFactExact time
v2.1.314 adds the configuration permissions.blockWritesOutsideWorkingDirectories; once enabled, the three file-writing tools Write, Edit, and NotebookEdit reject paths outside the working directory under any permission mode.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/30/2026
First Seen
Valid until: 1/28/2027
Sources
Related Entities
Related Claims
UnverifiedIn auto mode, a one-time prompt will appear before reading files outside the working directory for the first time, and users can block such reads via permissions.blockReadsOutsideWorkingDirectories.72% similarUnverifiedUnder WorkBuddy's default permissions, every operation requires a second confirmation, and the author does not recommend enabling 'full allow' to avoid accidental file operations67% similarUnverifiedFixed an issue where file permission rules containing uncompilable patterns (such as an unclosed [) caused all file editing operations to fail due to invalid regular expressions; such deny rules now fall back to guarding only the literal path63% similarVerifiedv2.1.269 fixes a security vulnerability where Edit() deny rules and write-path checks did not cover files written by the Bash tee command.61% similarUnverifiedIn v1.10.0, credential handling now rejects configuration files that are writable by groups or other users.60% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1114933API
curl https://kongchang.com/api/v1/knowledge/claims/1114933MCP
get_claim(id=1114933)