{"name":"soft_deny","slug":"soft-deny","family":"setting","title":"Settings keys","noun":"settings key","description":"Permission decisions can now be soft or hard denials, with reasons like unreadable rules.","description_source":"entry","described_by":{"version":"2.1.248","anchor":"permission-denials-split-into-soft-and-hard"},"presence":{"first_seen":"2.1.318","removed_in":"2.1.319","in_current_build":false,"newest_mined":"2.1.319","builds":1,"mined_builds":159,"first_cited":{"version":"2.1.136","released_at":"2026-05-08 16:30:41","spans":2}},"aliases":[],"entries":[{"version":"2.1.319","anchor":"auto-mode-rule-attribution-and-untrusted-folder-config-refus","heading":"Auto mode decisions can name the rule behind them and flag untrusted folders","line":"Auto mode results can now name the allow or soft deny rule that applied, and a permission check can now report an untrusted folder","released_at":"2026-11-06 00:58:56","reason":"found in this entry's text"},{"version":"2.1.314","anchor":"auto-mode-rule-categories-get-descriptions","heading":"Auto mode rule types each get a plain description","line":"Claude Code now has a short description for each kind of auto mode rule: allow, soft deny, hard deny and environment","released_at":"2026-10-30 00:12:56","reason":"found in this entry's text"},{"version":"2.1.310","anchor":"auto-mode-settings-are-trimmed-unless-mode-is-full","heading":"Only deny rules from auto mode settings pass on outside full mode","line":"Unless the mode is full, Claude Code now passes on only the soft_deny and hard_deny auto mode settings instead of all of them","released_at":"2026-10-23 21:20:46","reason":"found in this entry's text"},{"version":"2.1.295","anchor":"self-hosted-runner-new-self-hosted-runner-server-auto-mode","heading":"Self-hosted runners can choose which server auto mode lists apply","line":"A new `SELF_HOSTED_RUNNER_SERVER_AUTO_MODE_LISTS` setting lets self-hosted runner operators limit which server-supplied auto mode lists sessions follow","released_at":"2026-10-08 18:22:58","reason":"found in this entry's text"},{"version":"2.1.283","anchor":"auto-mode-skips-a-second-classifier-run-for-sendmessages-fo","heading":"Auto mode no longer checks a message twice when forwarding it to Claude Desktop","line":"In auto mode, a message SendMessage forwards to Claude Desktop is allowed without a second safety check if the first check already allowed it","released_at":"2026-09-25 18:46:11","reason":"found in this entry's text"},{"version":"2.1.282","anchor":"managed-settings-invalid-lock-values-and-nested-permission","heading":"Broken managed settings now fail safe, including permission and sandbox blocks","line":"An invalid value in managed settings now becomes its most restrictive value, and a block with an unreadable deny rule loses its allow grants","released_at":"2026-09-24 15:56:22","reason":"found in this entry's text"},{"version":"2.1.281","anchor":"auto-mode-classifier-prompt-can-be-built-without-the-users","heading":"Auto-mode classifier prompt can be built without the user's auto-mode rules","line":"The auto-mode classifier prompt can now be built with its allow, soft_deny, hard_deny and environment rule lists left empty","released_at":"2026-09-23 17:01:17","reason":"found in this entry's text"},{"version":"2.1.248","anchor":"permission-denials-split-into-soft-and-hard","heading":"Permission denials split into soft and hard","line":"Permission decisions can now be soft or hard denials, with reasons like unreadable rules.","released_at":"2026-08-27 20:35:36","reason":"found in this entry's text"},{"version":"2.1.136","anchor":"auto-mode-hard-deny-rules","heading":"Auto Mode Hard-Deny Rules","line":null,"released_at":"2026-05-08 16:30:41","reason":"found in this entry's text"},{"version":"2.1.118","anchor":"auto-mode-classifier-defaults-inheritance","heading":"Auto Mode Classifier $defaults Inheritance","line":null,"released_at":"2026-04-22 23:48:56","reason":"found in this entry's text"}],"entries_total":12,"docs":[{"source":"claude-code","path":"auto-mode-config","title":"Configure auto mode","documented":false},{"source":"claude-code","path":"best-practices","title":"Best practices for Claude Code","documented":false},{"source":"claude-code","path":"changelog","title":"Claude Code changelog","documented":false},{"source":"claude-code","path":"managed-settings","title":"Deploy managed settings","documented":false},{"source":"claude-code","path":"self-hosted-environments-reference","title":"Self-hosted environments reference","documented":false},{"source":"claude-code","path":"server-managed-settings","title":"Configure server-managed settings","documented":false},{"source":"claude-code","path":"settings","title":"Claude Code settings","documented":false},{"source":"claude-code","path":"settings-reference","title":"All settings","documented":false},{"source":"claude-code","path":"whats-new\/2026-w17","title":"Week 17 \u00b7 April 20\u201324, 2026","documented":false},{"source":"claude-docs","path":"cowork\/changelog","title":"Changelog","documented":false}],"docs_total":11,"gates":[],"related":[],"url":"https:\/\/changelogs.core-directive.com\/reference\/setting\/soft-deny","family_url":"https:\/\/changelogs.core-directive.com\/reference\/setting.json"}