{"name":"tengu_bash_security_check_triggered","slug":"tengu-bash-security-check-triggered","family":"flag","title":"Feature flags","noun":"feature flag","description":null,"description_source":"none","described_by":null,"presence":{"first_seen":null,"removed_in":null,"in_current_build":false,"newest_mined":"2.1.308","builds":0,"mined_builds":149,"first_cited":null},"aliases":[],"entries":[{"version":"2.0.68","anchor":"security-check-for-proc-environ-access","heading":"Security Check for \/proc\/*\/environ Access","line":null,"released_at":"2025-12-12 22:56:02","reason":"gate cited by this entry, found in this entry's text"}],"entries_total":1,"docs":[],"docs_total":0,"gates":[],"related":[{"name":"tengu_bash_allowlist_strip_all","slug":"tengu-bash-allowlist-strip-all","description":"Default `false`. Its value is recorded as `stripAllBashFlag` on the `tengu_auto_mode_decision` telemetry event sent when the auto mode classifier reviews a tool call; the fast-path and subagent-handoff decision events do not carry it, and no other code reads the flag in this version."},{"name":"tengu_bash_ast_too_complex","slug":"tengu-bash-ast-too-complex","description":"Bash's 'too complex to check' read-block guard now applies via a general table covering more refusal reasons, not just one hardcoded case"},{"name":"tengu_bash_command_clamp_denied","slug":"tengu-bash-command-clamp-denied","description":"If a clamped agent's permission check crashes, the shell command is denied rather than allowed."},{"name":"tengu_bash_dangerous_rm_too_complex","slug":"tengu-bash-dangerous-rm-too-complex","description":"The dangerous-rm safety check for bash commands can now be extended with an extra custom check"},{"name":"tengu_bash_task_ack","slug":"tengu-bash-task-ack","description":"Backgrounded shell commands may return a structured task record instead of raw output."},{"name":"tengu_bash_task_delivered","slug":"tengu-bash-task-delivered","description":"Finished background tasks now report whether their output was spliced back in or lost."},{"name":"tengu_bash_tool_command_executed","slug":"tengu-bash-tool-command-executed","description":"Bash\/PowerShell telemetry and sandbox checks now track whether the user typed the command directly."},{"name":"tengu_bash_tool_command_failed","slug":"tengu-bash-tool-command-failed","description":"Bash tool telemetry now records a detailed breakdown of each command's shape"}],"url":"https:\/\/changelogs.core-directive.com\/reference\/flag\/tengu-bash-security-check-triggered","family_url":"https:\/\/changelogs.core-directive.com\/reference\/flag.json"}