Claude Code 2.1.289 fixes four cases where deny and ask rules didn't hold

TL;DR

• Claude Code 2.1.289, released on 3 October, fixes four cases where a deny or ask rule missed a command or file it covered.
• Two of them came up under sandbox auto-allow, one under a user-installed mod's approval on managed machines, and one with Read rules and symlinks in the IDE.
• The release also stops a user-installed plugin from rewriting the descriptions of an organisation-managed MCP server's sign-in tools.