Delta CC-02 — Claude Code dossier

DELTA CC-02 / Claude Code

Path deny rules do not bind MCP tools (#28595) or Bash recursive grep/Glob (#28008) accessing the same denied paths

openopened ≤2026-03

Description

UPDATE 2026-07-04: TD executed the Bash-grep half of this criterion on v2.1.201 — a Read(secret.txt) deny rule did NOT block 'grep -r' recursing into the denied path (the secret line was printed verbatim), while a direct Bash 'cat' of the same path WAS blocked. Criterion not met; delta stays open, now on executed rather than issue-review evidence. The MCP-file-read-tool half and the built-in Glob/Grep-tool half (the latter reportedly hardened in v2.1.162) remain source-reviewed, not executed this pass.

Closes when

A deny rule on a path blocks MCP file-read tools and Bash grep -r/Glob against that same path, re-verified on a current release

Evidence

[1][2]Re-verified 2026-07-04 (v2.1.201, TD-executed): #28595 closed duplicate, #28008 closed stale — neither fixed; Bash 'grep -r' bypass confirmed still active by controlled reproduction