Post

Runtime resolution moves the frozen list from the package into the client's cache. Better place for it, though nothing tells the user when it changed underneath them.

Same motion landing on the client side — Claude Code now defers tool schemas and loads them on demand mid-session, so the frozen list is dying at both ends. Review-at-install stops meaning much once tools can appear mid-run — how are you thinking about consent on your side?