Updated Oct 30

Claude Code adds a write boundary for three file tools

Version 2.1.314 names Write, Edit and NotebookEdit; it does not establish containment for every execution route.

The named tools

The [release](https://github.com/anthropics/claude‑code/releases/tag/v2.1.314) adds `permissions.blockWritesOutsideWorkingDirectories`. Anthropic says Write, Edit and NotebookEdit reject paths beyond the working directories across permission modes.

Separate execution routes

Editing a sibling folder with a named file tool and with a shell command uses different execution routes. The notes do not establish this setting’s coverage of Bash, MCP or operating‑system activity, its default, or symlink behavior. OpenTools’ [MCP integration guide](https://opentools.ai/resources/claude‑code‑mcp‑integration) covers external‑tool connections, not this new setting. Original illustration of the named file‑tool write boundary; not a system sandbox or tested outcome.

Related News

Oct 27, 2026

Claude Code 2.1.311 adds idle holds for self-hosted runners and fixes background-agent handling

Anthropic’s October 26 release adds two runner controls and addresses interrupted MCP reads, late tool connections and nested background-worktree cleanup. These are release-note changes, with no independent reliability test implied.

Claude CodeAnthropicDeveloper tools

Oct 26, 2026

Linear adds Slack and GitHub triggers, shared templates and reasoning settings to Loops

Linear’s October 22 release lets Slack and GitHub events start Loops, adds workspace templates and exposes reasoning settings. The notice leaves plan access, full event filters and connection permissions unspecified.

LinearAI agentsSlack

Oct 26, 2026

Box adds four agent skills while keeping account access separate

Box’s October 22 release packages guidance for CLI, MCP, SDK and integration tasks. Installing the instructions does not authenticate an agent or expand its Box permissions.

BoxAgent SkillsMCP