{"name":"tengu_bash_command_clamp_denied","slug":"tengu-bash-command-clamp-denied","family":"flag","title":"Feature flags","noun":"feature flag","description":"If a clamped agent's permission check crashes, the shell command is denied rather than allowed.","description_source":"entry","described_by":{"version":"2.1.227","anchor":"command-clamps-deny-rather-than-fall-open"},"presence":{"first_seen":null,"removed_in":null,"in_current_build":false,"newest_mined":"2.1.308","builds":0,"mined_builds":149,"first_cited":{"version":"2.1.227","released_at":"2026-08-10 20:56:57","spans":1}},"aliases":[],"entries":[{"version":"2.1.227","anchor":"command-clamps-deny-rather-than-fall-open","heading":"Command clamps deny rather than fall open","line":"If a clamped agent's permission check crashes, the shell command is denied rather than allowed.","released_at":"2026-08-10 20:56:57","reason":"gate cited by this entry, found in this entry's text"},{"version":"2.1.227","anchor":"clamped-agents-are-blocked-on-every-execution-surface","heading":"Clamped agents are blocked on every execution surface","line":"Command-restricted agents are now blocked on PowerShell and the Monitor tool too, and fail closed.","released_at":"2026-08-10 20:56:57","reason":"gate cited by this entry, found in this entry's text"}],"entries_total":2,"docs":[],"docs_total":0,"gates":[],"related":[{"name":"tengu_bash_allowlist_strip_all","slug":"tengu-bash-allowlist-strip-all","description":"Default `false`. Its value is recorded as `stripAllBashFlag` on the `tengu_auto_mode_decision` telemetry event sent when the auto mode classifier reviews a tool call; the fast-path and subagent-handoff decision events do not carry it, and no other code reads the flag in this version."},{"name":"tengu_bash_ast_too_complex","slug":"tengu-bash-ast-too-complex","description":"Bash's 'too complex to check' read-block guard now applies via a general table covering more refusal reasons, not just one hardcoded case"},{"name":"tengu_bash_dangerous_rm_too_complex","slug":"tengu-bash-dangerous-rm-too-complex","description":"The dangerous-rm safety check for bash commands can now be extended with an extra custom check"},{"name":"tengu_bash_security_check_triggered","slug":"tengu-bash-security-check-triggered","description":null},{"name":"tengu_bash_task_ack","slug":"tengu-bash-task-ack","description":"Backgrounded shell commands may return a structured task record instead of raw output."},{"name":"tengu_bash_task_delivered","slug":"tengu-bash-task-delivered","description":"Finished background tasks now report whether their output was spliced back in or lost."},{"name":"tengu_bash_tool_command_executed","slug":"tengu-bash-tool-command-executed","description":"Bash\/PowerShell telemetry and sandbox checks now track whether the user typed the command directly."},{"name":"tengu_bash_tool_command_failed","slug":"tengu-bash-tool-command-failed","description":"Bash tool telemetry now records a detailed breakdown of each command's shape"}],"url":"https:\/\/changelogs.core-directive.com\/reference\/flag\/tengu-bash-command-clamp-denied","family_url":"https:\/\/changelogs.core-directive.com\/reference\/flag.json"}