tengu_flickering_rain
A Claude Code feature flag, read out of the shipped bundle. No mined inventory carries it: everything below comes from what this site has written about it.
Bash, PowerShell, and Monitor tools can now declare extra allowed network domains for sandboxed commands
Not Anthropic's. This is the line from the earliest changelog entry here that named it, v2.1.268.
In the changelogs
6Releases whose published page names tengu_flickering_rain.
-
v2.1.271
Sandboxed command network lists now default-enabled (tengu_flickering_rain)
Sandboxed command network allow/deny lists now default to enabled if the controlling flag can't be read
gate cited by this entry, found in this entry's text
-
v2.1.268
Bash/PowerShell/Monitor tools can declare per-command network allowlists (
allowed_domains)Bash, PowerShell, and Monitor tools can now declare extra allowed network domains for sandboxed commands
gate cited by this entry
-
v2.1.268
New
allowed_domainsparameter for sandboxed Bash commands, gated dark by tengu_flickering_rainA new allowed_domains parameter lets the model tell a sandboxed Bash command which network hosts it needs, feature-flagged and not yet confirmed live
gate cited by this entry, found in this entry's text
-
v2.1.268
New canned deny path for allowed_domains network classification, gated behind tengu_flickering_rain
A new gated shortcut can deny network access to hosts outside a command's allowed_domains without running the full classifier
gate cited by this entry, found in this entry's text
-
v2.1.268
Per-command network allowlists now enforced against actual sandbox confinement
Commands approved with domain restrictions are now refused outright if they would run unconfined by a sandbox
gate cited by this entry
-
v2.1.268
Sandbox system-prompt text rewritten to describe allowed_domains / auto-mode network review
Sandbox instructions shown to the model were rewritten to explain listing needed hosts and reacting to blocked-host violations
gate cited by this entry
Gate readings
1| Release | Resolved | This account | Anonymous | Compiled default |
|---|---|---|---|---|
| v2.1.271 read on another version | On for this account, and not off by default | on | on | on |
Two arms, because they disagree: this account is the one account this site reads and anonymous is a baseline with no identity attached. A reading says nothing about your account, and off cannot rule out a rollout both readings sit outside of. What these readings can and cannot show.
Flag server, over time
18| Read as | Reading | From | Until | Version installed |
|---|---|---|---|---|
| this account | on | 2026-11-02T13:05:04Z | 2026-11-12T07:05:04Z | v2.1.316 to v2.1.322 |
| anonymous | on | 2026-10-17T05:30:04Z | 2026-11-12T07:05:04Z | v2.1.302 to v2.1.322 |
| this account | off | 2026-11-02T12:55:05Z | 2026-11-02T12:55:05Z | v2.1.316 |
| this account | on | 2026-11-01T20:45:05Z | 2026-11-02T12:40:07Z | v2.1.316 |
| this account | off | 2026-11-01T20:40:05Z | 2026-11-01T20:40:05Z | v2.1.316 |
| this account | on | 2026-11-01T20:25:04Z | 2026-11-01T20:30:06Z | v2.1.316 |
| this account | off | 2026-11-01T20:20:05Z | 2026-11-01T20:20:05Z | v2.1.316 |
| this account | on | 2026-10-07T18:00:12Z | 2026-11-01T19:30:06Z | v2.1.292 to v2.1.316 |
| anonymous | no longer carried | 2026-10-17T05:25:57Z | 2026-10-17T05:25:57Z | v2.1.302 |
| anonymous | on | 2026-09-14T22:25:03Z | 2026-10-17T05:10:04Z | v2.1.271 to v2.1.302 |
| this account | off | 2026-10-07T17:59:34Z | 2026-10-07T17:59:34Z | v2.1.293 |
| this account | on | 2026-09-14T22:25:03Z | 2026-10-07T17:10:05Z | v2.1.271 to v2.1.292 |
| anonymous | off | 2026-09-14T20:40:05Z | 2026-09-14T22:15:04Z | v2.1.270 |
| this account | off | 2026-09-14T20:40:05Z | 2026-09-14T22:15:04Z | v2.1.270 |
| anonymous | on | 2026-09-14T20:36:35Z | 2026-09-14T20:36:35Z | v2.1.271 |
| this account | on | 2026-09-14T20:36:35Z | 2026-09-14T20:36:35Z | v2.1.271 |
| this account | off | 2026-09-13T23:25:04Z | 2026-09-14T19:25:04Z | v2.1.270 |
| anonymous | off | 2026-09-13T23:05:04Z | 2026-09-14T19:25:04Z | v2.1.270 |
One row per unbroken stretch of one reading, newest first, from snapshots taken every twenty-five minutes or so. No longer carried is not off: it means the flag server stopped returning the gate at all, which is what a retired experiment looks like. The version column is what was installed when the reading was taken, not what caused it.
First cited
1The earliest release whose published evidence quoted tengu_flickering_rain was v2.1.268, 10 Sep 2026. That is the oldest release this project wrote about it, so it is a floor on the name's age and not the release that introduced it. It is not a presence reading: which builds carried the name is the table below.
Presence across releases
0The miner has never read a build containing this name. It is here because a changelog entry of ours names it, which is evidence that it existed and not evidence of which releases carried it. The inventory starts at v2.1.138 and everything older than that was never mined.
Read out of the published npm bundle release by release, and out of Anthropic's own documentation as this site captured it. Nothing on this page is a description anybody here wrote about what the feature flag does. All feature flags.