Boundary fixes
Anthropic dates Claude Code 2.1.316 to October 31 at 01:01 UTC, or October 30 at 20:01 Central. Its notes report fixes for restricted sessions uploading outside working directories under a Read allow rule, managed autoMode.allow lists without "$defaults" regaining exceptions, and PowerShell hooks failing to block certain command prefixes on exit code 2. We did not test these fixes. [1]
The permissions guide distinguishes tool rules from operating-system sandboxing; arbitrary subprocesses need their own boundaries. [2]
Our take
Review the installed version and configuration. Test harmless boundary cases before using sensitive projects.