Workspace-Only Tools after 10.9

v2026.10.9: workspace-only restrictions now apply to Gateway-built delegation and media tools. Restricted setting changes require approval. Media reads stay inside the allowed folders. If an agent “suddenly cannot read a file” after upgrade, this is the first place to look.

This is a tightening of a mode you already opted into, not a new default for every install. Broader hardening: best practices. Patch list: October 2026 patch.

What started failing

  • Delegation tools that reached outside the workspace to “just read ~/.ssh” or another project folder.
  • Media reads (images, attachments) whose path was not under the allowed tree.
  • Setting changes that used to apply silently in a restricted profile—those now wait for approval.

What to do

  1. Decide whether the file belongs in the workspace. If yes, move it. If no, do not widen the allowlist to the whole home directory.
  2. For specialist teams, give each role its own workspace rather than one shared disk. Teams wizard and skill scope.
  3. Approve restricted setting changes on purpose, from a machine you control—not from a public conversation link.

Related