1
00:00:00,099 --> 00:00:03,980
So I was- I was working in the shed on the
weekend, tuning up this old Suzuki trail

2
00:00:04,079 --> 00:00:04,679
bike, right?

3
00:00:05,199 --> 00:00:06,579
And she backfires.

4
00:00:07,239 --> 00:00:12,460
Just this massive *bang*, and- and
suddenly my automatic garage door starts opening

5
00:00:12,500 --> 00:00:13,119
itself.

6
00:00:14,359 --> 00:00:18,359
It- it was like a loose parser or
something, just getting completely confused by a

7
00:00:18,420 --> 00:00:19,199
stray signal.

8
00:00:19,979 --> 00:00:23,340
And- and that made me think of the new
Claude Code update- oh,

9
00:00:23,439 --> 00:00:28,219
by the way, this episode is brought to you
by Jellypod AI- but yeah,

10
00:00:28,619 --> 00:00:34,799
Claude Code version 2.1.214, which came
out on July 18, 2026.

11
00:00:35,459 --> 00:00:40,019
They literally had to rebuild how their
Bash permission analyzer handles stray

12
00:00:40,079 --> 00:00:41,379
signals, so to speak.

13
00:00:41,742 --> 00:00:43,722
July 18, 2026.

14
00:00:44,422 --> 00:00:49,242
Yeah, that- that v2.1.214 patch is huge
for safety.

15
00:00:49,902 --> 00:00:54,563
Because, I mean, if your parser has a
loose sensor, an AI agent can basically write

16
00:00:54,622 --> 00:00:56,422
files wherever it wants.

17
00:00:56,522 --> 00:00:59,242
Especially with the way it- it used to
handle directory scoping.

18
00:00:59,683 --> 00:01:03,302
Like, they completely changed the
single-segment dir/** allow rules.

19
00:01:03,333 --> 00:01:05,413
Yeah, that- that directory thing was wild.

20
00:01:05,527 --> 00:01:11,893
Before this, if you had an allow rule
like, uh, Edit(src/**),

21
00:01:11,913 --> 00:01:15,733
you'd think it only allows edits in the
root src folder, right?

22
00:01:15,813 --> 00:01:19,493
But it was actually auto-approving writes
to nested directories,

23
00:01:19,541 --> 00:01:20,693
like, deep down.

24
00:01:20,821 --> 00:01:26,037
Like modules/libs/src/config.json.

25
00:01:26,181 --> 00:01:31,173
That is- that is a massive security hole
if you're trying to keep the agent in a

26
00:01:31,253 --> 00:01:31,973
sandbox.

27
00:01:32,298 --> 00:01:38,317
Exactly, modules/libs/src/config.json
should

28
00:01:38,757 --> 00:01:42,378
*never* have been touched by a rule meant
for the root src.

29
00:01:42,838 --> 00:01:47,997
So now, they strictly scope that dir/**
matching to the current working directory.

30
00:01:48,058 --> 00:01:48,638
It's strictly