Claude Code closed permission bypasses: update before relying on deny rules
Claude Code releases from 3 to 14 October 2026 fixed deny and ask rules that could be skipped. What was fixed, what deny rules never covered, and how to retest.
5 min read
Blog tag
#Guardrails
Rules that block, warn about or redact what goes into prompts and tool calls.
Claude Code hooks can now fail closed when enforcement breaks
Claude Code v2.1.295 adds onFailure: block for command and HTTP hooks so missing scripts, timeouts and unexpected exits deny the action instead of failing open.
Write guardrails that keep secrets and personal data out of prompts
Add two or three SpanDock guardrails for secrets, personal data and your own patterns, enforce them on every computer, and check that they work.
When model output becomes code: three agent framework advisories from October
Flowise, Langflow and PraisonAI fixed flaws where prompt injection led to code execution. The shared mistake, and what to check in your own agents.
4 min read
Browse by tag
- #Security (54)
- #Agents (40)
- #AI coding tools (37)
- #LLM costs (23)
- #MCP (16)
- #Evaluation (14)
- #Observability (12)
- #Compliance (11)
- #Enterprise (9)
- #Platform engineering (9)
- #Data privacy (8)
- #DevOps (7)
- #Model routing (7)
- #Open-weight models (7)
- #Research (7)
- #Tutorials (6)
- #Code review (4)
- #Developer productivity (4)
- #Guardrails (4)
- #Networking (4)
- #OpenTelemetry (4)
- #Budgets (3)
- #Prompt engineering (3)
- #Self-hosting (3)
- #MCP gateway (2)
- #Release notes (2)
- #Skills (1)
- #Testing (1)