Vibe Coding
qwen-code v0.23.0 refuses to let its AUTO-mode classifier approve out-of-workspace writes
Shipped 2026-09-03, the release hard-codes a fallback to manual approval for any out-of-workspace write rather than letting the AUTO-mode permission classifier decide, and separately forwards bounded MCP tool arguments and server annotations to that classifier so decisions rest on more than tool names. It also authenticates cross-session inbox connections with per-session tokens and gives a session's own processes a child token the inbound gate recognizes. Three separate hardening changes to the same permission and IPC surface in one release.
Source
↳ Follow the thread