Play / The map / The capabilities / Read a retained record: shell history, past sessions
Read a retained record: shell history, past sessions
read.record.history — read × record at host reach (the machine, container or account it runs as). Family: filesystem. Effect: cannot be undone.
Granted by 4 of 9
| Profile | Control on the path | Evidence | Via |
|---|---|---|---|
| Claude Code — web container | ● none | observed | shell (Bash) |
| Claude Code — local · confirm off | ● none | documented | shell (Bash) |
| Claude Code — local · confirm on | ● none | documented | shell (Bash) |
| Claude Desktop — local tools | ● none | documented | local files and commands (when enabled) |
What narrows it
The setting: history off, or a fresh environment per task, so the grant is a tree over the present rather than a union over every prior turn
What it costs: the agent forgets between tasks
Tier after: boundary
In the mandates
- not wanted by A coding assistant on my machine
- not wanted by A coding assistant in a container on the web
- not wanted by The desktop app, with local tools switched on
- not wanted by Chat in the browser, nothing connected