You Can Rip Out the Whole "Tool That Runs Code"—Claude Code v2.1.248's `--restricted` Hands Least Privilege to Other People's Repos and Unattended Runs
Claude Code v2.1.248's `--restricted` is a launch option that removes command execution and WebFetch and confines file operations to the working directory. It hands least privilege to other people's repositories and unattended runs. It also includes quiet fixes like preventing credential exfiltratio