Named tools first
Claude Code v2.1.314 was released at 01:06:26 UTC on October 30, equivalent to 20:06:26 CDT on October 29. This is an earlier-release catch-up. Its notes add permissions.blockWritesOutsideWorkingDirectories: Write, Edit, and NotebookEdit refuse paths outside working directories in every permission mode. They also report fixes for policy refresh after cache expiry and resumed-worktree sandbox protections. [1]
Anthropic’s permissions guide distinguishes built-in file rules and recognized Bash paths from arbitrary subprocess writes. It describes operating-system sandboxing as complementary protection and documents MCP permission rules separately. Editing-tool settings alone should not be treated as evidence of complete process isolation. [2]
Our take
Check Bash, external tools, and operating-system policies separately. A setting for named editing tools does not establish a complete sandbox. We reviewed documentation without installing or testing this release.