AIFIRST Claude Code 2.1.220 review: Write() permission deny rules found to be inert
The brief
Review of 2.1.220 finds Write(path) permission deny rules are not matched by file permission checks; only Edit(path) rules cover file-editing tools.
Key points
- Teams using Write() deny rules for sensitive files have no protection.
Sources
- aifirst-reviewgithub.com
- Source codegithub.com