{"name":"tengu_flickering_rain","slug":"tengu-flickering-rain","family":"flag","title":"Feature flags","noun":"feature flag","description":"Bash, PowerShell, and Monitor tools can now declare extra allowed network domains for sandboxed commands","description_source":"entry","described_by":{"version":"2.1.268","anchor":"bashpowershellmonitor-tools-can-declare-per-command-networ"},"presence":{"first_seen":null,"removed_in":null,"in_current_build":false,"newest_mined":"2.1.322","builds":0,"mined_builds":161,"first_cited":{"version":"2.1.268","released_at":"2026-09-10 18:41:11","spans":1}},"aliases":[],"entries":[{"version":"2.1.271","anchor":"sandboxed-command-network-lists-now-default-enabled-tengu-f","heading":"Sandboxed command network lists now default-enabled (tengu_flickering_rain)","line":"Sandboxed command network allow\/deny lists now default to enabled if the controlling flag can't be read","released_at":"2026-09-14 19:45:19","reason":"gate cited by this entry, found in this entry's text"},{"version":"2.1.268","anchor":"bashpowershellmonitor-tools-can-declare-per-command-networ","heading":"Bash\/PowerShell\/Monitor tools can declare per-command network allowlists ( allowed_domains )","line":"Bash, PowerShell, and Monitor tools can now declare extra allowed network domains for sandboxed commands","released_at":"2026-09-10 18:41:11","reason":"gate cited by this entry"},{"version":"2.1.268","anchor":"new-allowed-domains-parameter-for-sandboxed-bash-commands","heading":"New allowed_domains parameter for sandboxed Bash commands, gated dark by tengu_flickering_rain","line":"A new allowed_domains parameter lets the model tell a sandboxed Bash command which network hosts it needs, feature-flagged and not yet confirmed live","released_at":"2026-09-10 18:41:11","reason":"gate cited by this entry, found in this entry's text"},{"version":"2.1.268","anchor":"new-canned-deny-path-for-allowed-domains-network-classificat","heading":"New canned deny path for allowed_domains network classification, gated behind tengu_flickering_rain","line":"A new gated shortcut can deny network access to hosts outside a command's allowed_domains without running the full classifier","released_at":"2026-09-10 18:41:11","reason":"gate cited by this entry, found in this entry's text"},{"version":"2.1.268","anchor":"per-command-network-allowlists-now-enforced-against-actual-s","heading":"Per-command network allowlists now enforced against actual sandbox confinement","line":"Commands approved with domain restrictions are now refused outright if they would run unconfined by a sandbox","released_at":"2026-09-10 18:41:11","reason":"gate cited by this entry"},{"version":"2.1.268","anchor":"sandbox-system-prompt-text-rewritten-to-describe-allowed-dom","heading":"Sandbox system-prompt text rewritten to describe allowed_domains \/ auto-mode network review","line":"Sandbox instructions shown to the model were rewritten to explain listing needed hosts and reacting to blocked-host violations","released_at":"2026-09-10 18:41:11","reason":"gate cited by this entry"}],"entries_total":6,"docs":[],"docs_total":0,"gates":[{"version":"2.1.271","state":"on-in-code","account":true,"baseline":true,"code_default":true}],"related":[{"name":"tengu_flickering_lagoon","slug":"tengu-flickering-lagoon","description":"send_message can route messages to a bridge address through a matching MCP tool, behind a remote switch that defaults to off"}],"url":"https:\/\/changelogs.core-directive.com\/reference\/flag\/tengu-flickering-rain","family_url":"https:\/\/changelogs.core-directive.com\/reference\/flag.json"}