{"name":"bashCommandClamp","slug":"bashcommandclamp","family":"setting","title":"Settings keys","noun":"settings key","description":"If a clamped agent's permission check crashes, the shell command is denied rather than allowed.","description_source":"entry","described_by":{"version":"2.1.227","anchor":"command-clamps-deny-rather-than-fall-open"},"presence":{"first_seen":null,"removed_in":null,"in_current_build":false,"newest_mined":"2.1.308","builds":0,"mined_builds":149,"first_cited":{"version":"2.1.227","released_at":"2026-08-10 20:56:57","spans":5}},"aliases":[],"entries":[{"version":"2.1.227","anchor":"command-clamps-deny-rather-than-fall-open","heading":"Command clamps deny rather than fall open","line":"If a clamped agent's permission check crashes, the shell command is denied rather than allowed.","released_at":"2026-08-10 20:56:57","reason":"found in this entry's text"},{"version":"2.1.227","anchor":"agent-refuses-spawns-whose-tool-restrictions-cannot-be-appli","heading":"agent() refuses spawns whose tool restrictions cannot be applied","line":"Spawning a sub-agent fails outright if its disallowed-tools list can't actually be applied.","released_at":"2026-08-10 20:56:57","reason":"found in this entry's text"},{"version":"2.1.227","anchor":"agent-refuses-spawns-where-the-bash-command-clamp-would-not-","heading":"agent() refuses spawns where the Bash command clamp would not bite","line":"Sub-agent spawns are refused when the Bash command restriction couldn't be enforced.","released_at":"2026-08-10 20:56:57","reason":"found in this entry's text"},{"version":"2.1.227","anchor":"powershell-is-denied-for-agents-with-a-shell-command-clamp","heading":"PowerShell is denied for agents with a shell command clamp","line":"Agents with a shell command restriction can't use PowerShell at all now.","released_at":"2026-08-10 20:56:57","reason":"found in this entry's text"},{"version":"2.1.227","anchor":"clamped-agents-are-blocked-on-every-execution-surface","heading":"Clamped agents are blocked on every execution surface","line":"Command-restricted agents are now blocked on PowerShell and the Monitor tool too, and fail closed.","released_at":"2026-08-10 20:56:57","reason":"found in this entry's text"},{"version":"2.1.227","anchor":"spawned-agents-can-be-clamped-to-a-fixed-set-of-shell-comman","heading":"Spawned agents can be clamped to a fixed set of shell commands","line":"Spawning an agent with a bad command clamp list now fails immediately instead of running unclamped.","released_at":"2026-08-10 20:56:57","reason":"named in this entry, found in this entry's text"},{"version":"2.1.227","anchor":"subagents-can-be-locked-to-a-fixed-list-of-bash-commands","heading":"Subagents can be locked to a fixed list of Bash commands","line":"Workflow scripts can restrict a spawned agent's shell to a fixed list of allowed commands.","released_at":"2026-08-10 20:56:57","reason":"named in this entry, found in this entry's text"}],"entries_total":7,"docs":[],"docs_total":0,"gates":[],"related":[],"url":"https:\/\/changelogs.core-directive.com\/reference\/setting\/bashcommandclamp","family_url":"https:\/\/changelogs.core-directive.com\/reference\/setting.json"}