Cross-note copy denied

Status

403

Retryable

no

Type

https://fastpad.ai/errors/cross-note-copy-denied

What it means

The content you proposed matches text you read from a DIFFERENT note in this session. The write was refused before anything was staged.

What to do

Propose content derived from the note you are writing to, or cite the source explicitly via `source_block_ids` and have a human grant the cross-note-copy capability.

Why it works this way

This is the exfiltration shape in ADR 0002: read a note containing injected instructions, then write its contents somewhere the attacker can read. Every per-call authorization check passes — the agent may read A and may write B — so the control has to be the session ledger, not the permission model.