Fetching from the wire…
Tools2026-08-28 · source-backed
--restricted or CLAUDE_CODE_RESTRICTED=1 removes the built-in tools that run commands or code plus WebFetch unless explicitly named in --tools, confines file tools to the working directory, refuses bypassPermissions, and ignores user, project and local settings files entirely (GitHub). For unattended agents this is the first mode that doesn't depend on getting a permissions config right, which the Rehberger chain and the IPE paper both argue you will not do.
Each link below shares sources, entities, or timing with this story.
OpenAI uses Claude Code / Shared entities / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (OpenAI uses Claude Code); both cover Claude Code, GitHub; reported by the same outlet (github.com).
Docker supports Claude Code / Shared entities / Same source domain / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Docker supports Claude Code); both cover Claude Code, GitHub, WebFetch; reported by the same outlet (github.com).
Codex competes with Claude Code / Shared entities / Same source domain / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Codex competes with Claude Code); both cover Claude Code, GitHub; reported by the same outlet (github.com).
Claude Code uses WebFetch / Shared entities / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (Claude Code uses WebFetch); both cover Claude Code, GitHub, WebFetch; reported by the same outlet (github.com).
Claude Code uses Opus / Shared entities / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (Claude Code uses Opus); both cover Claude Code, GitHub; reported by the same outlet (github.com).
Codex competes with Claude Code / Shared entities / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (Codex competes with Claude Code); both cover Claude Code, GitHub; reported by the same outlet (github.com).
Claude Code uses LSP / Shared entities / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (Claude Code uses LSP); both cover Claude Code, GitHub; reported by the same outlet (github.com).
Codex competes with Claude Code / Shared entities / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (Codex competes with Claude Code); both cover Claude Code, GitHub; reported by the same outlet (github.com).