{"name":"hard_deny","slug":"hard-deny","family":"setting","title":"Settings keys","noun":"settings key","description":"Permission decisions can now be soft or hard denials, with reasons like unreadable rules.","description_source":"entry","described_by":{"version":"2.1.248","anchor":"permission-denials-split-into-soft-and-hard"},"presence":{"first_seen":"2.1.318","removed_in":"2.1.319","in_current_build":false,"newest_mined":"2.1.322","builds":1,"mined_builds":161,"first_cited":{"version":"2.1.136","released_at":"2026-05-08 16:30:41","spans":2}},"aliases":[],"entries":[{"version":"2.1.314","anchor":"auto-mode-rule-categories-get-descriptions","heading":"Auto mode rule types each get a plain description","line":"Claude Code now has a short description for each kind of auto mode rule: allow, soft deny, hard deny and environment","released_at":"2026-10-30 00:12:56","reason":"found in this entry's text"},{"version":"2.1.310","anchor":"auto-mode-settings-are-trimmed-unless-mode-is-full","heading":"Only deny rules from auto mode settings pass on outside full mode","line":"Unless the mode is full, Claude Code now passes on only the soft_deny and hard_deny auto mode settings instead of all of them","released_at":"2026-10-23 21:20:46","reason":"found in this entry's text"},{"version":"2.1.283","anchor":"auto-mode-skips-a-second-classifier-run-for-sendmessages-fo","heading":"Auto mode no longer checks a message twice when forwarding it to Claude Desktop","line":"In auto mode, a message SendMessage forwards to Claude Desktop is allowed without a second safety check if the first check already allowed it","released_at":"2026-09-25 18:46:11","reason":"found in this entry's text"},{"version":"2.1.282","anchor":"managed-settings-invalid-lock-values-and-nested-permission","heading":"Broken managed settings now fail safe, including permission and sandbox blocks","line":"An invalid value in managed settings now becomes its most restrictive value, and a block with an unreadable deny rule loses its allow grants","released_at":"2026-09-24 15:56:22","reason":"found in this entry's text"},{"version":"2.1.281","anchor":"auto-mode-classifier-prompt-can-be-built-without-the-users","heading":"Auto-mode classifier prompt can be built without the user's auto-mode rules","line":"The auto-mode classifier prompt can now be built with its allow, soft_deny, hard_deny and environment rule lists left empty","released_at":"2026-09-23 17:01:17","reason":"found in this entry's text"},{"version":"2.1.248","anchor":"permission-denials-split-into-soft-and-hard","heading":"Permission denials split into soft and hard","line":"Permission decisions can now be soft or hard denials, with reasons like unreadable rules.","released_at":"2026-08-27 20:35:36","reason":"found in this entry's text"},{"version":"2.1.136","anchor":"auto-mode-hard-deny-rules","heading":"Auto Mode Hard-Deny Rules","line":null,"released_at":"2026-05-08 16:30:41","reason":"found in this entry's text"}],"entries_total":7,"docs":[{"source":"claude-code","path":"auto-mode-config","title":"Configure auto mode","documented":false},{"source":"claude-code","path":"managed-settings","title":"Deploy managed settings","documented":false},{"source":"claude-code","path":"server-managed-settings","title":"Configure server-managed settings","documented":false},{"source":"claude-code","path":"settings","title":"Claude Code settings","documented":false},{"source":"claude-code","path":"settings-reference","title":"All settings","documented":false},{"source":"claude-docs","path":"third-party\/claude-desktop\/code","title":"Code in Claude Desktop on 3P","documented":false}],"docs_total":6,"gates":[],"related":[{"name":"hardBlockUnder","slug":"hardblockunder","description":"HIPAA compliance settings gain a stricter 'hard block' tier alongside existing denial rules"}],"url":"https:\/\/changelogs.core-directive.com\/reference\/setting\/hard-deny","family_url":"https:\/\/changelogs.core-directive.com\/reference\/setting.json"}