Evidence record / claude-code

A dated record of one change, kept so the writing that cites it can be checked. Compiled from the sources listed below by the research run, not written for reading. The judgment lives in the signals and issues that cite it, below.

WebFetch Permission Rules Enforcement

What Changed

Fixed WebFetch permission rules not applying to built-in preapproved domains

Operator Implication

Custom permission rules now correctly override preapproved domain whitelist for WebFetch, improving policy enforcement consistency

Receipt

Bug Fixes: Fixed WebFetch permission rules not applying to built-in preapproved domains

Finding metadata

Confidence: high
Actionability: observe
Accessibility impact: none

Run: 2026-06-03-weekly-digest-2026-05-28_2026-06-03-frontier-v0

Finding ID: 2026-06-03-claude-code-webfetch-permission-rules

Accepted signals

Permission and deny rules now enforced as written across WebFetch, Windows paths, and Glob/Grep / 2026-06-03

Profile citations

Claude Code / claim / permission-rule-enforcement-cluster

Source links

Primary links, including exact changelog lines when available.

Claude Code
release noteBug Fixes: Fixed WebFetch permission rules not applying to built-in preapproved domainscode.claude.com/docs/en/changelog

Versioned source: run artifact