AINewsnow

Your Allowlist Lost to a Heredoc

A tool description is a second policy. When it disagrees with your allowlist, the model follows the description. Permissions are a filter on the way out. The paragraph inside the tool schema proposes the command before that filter ever sees it. A recent writeup about leaving Claude Code for Pi meas…

Read the full story at DEV Community — AI ↗

Timeline · 1 report

  1. 2026-11-08 22:48 · DEV Community — AI
    Your Allowlist Lost to a Heredoc

More stories

  1. AI-DLC: How AWS Built Harness-Neutral Workflow Rules That Run in Claude Code, Cursor, and Seven Other Agents — DEV Community — AI
  2. Anthropic launches Claude Personal Finance beta with read-only bank access in the US — Engadget
  3. Claude Code's 'Don't Ask Again' permission file leaked thousands of secrets to public GitHub — The Hacker News (security)
  4. Perplexity launches Teammates, always-on AI agents for ongoing work — Techmeme
  5. Anthropic simplifies repo setup for Claude Code cloud sessions — Anthropic (X)
  6. Anthropic tests Claude as an agent in two EVE online games — Anthropic News
  7. AI Daily Digest November 7, 2026: AI Cracks Legacy RSA, Gemini Omni Gets Longer Clips, First Humanoid IPO — DEV Community — AI
  8. How does the RustRover debugger MCP server work? — DEV Community — AI

Get the daily brief of stories like this at 6:30 every morning →