What
Auto mode custom rules now distinguish soft blocks from hard security blocks.
Usage
{
"autoMode": {
"allow": ["$defaults"],
"soft_deny": ["$defaults"],
"hard_deny": [
"$defaults",
"Never send secrets to external endpoints"
],
"environment": ["$defaults"]
}
}Details
soft_denyis now described as destructive or irreversible behavior that clear user intent can authorize.hard_denyis new and covers security-boundary actions that user intent does not clear.claude auto-mode defaults,claude auto-mode config, andclaude auto-mode critiquenow understand all four categories:allow,soft_deny,hard_deny, andenvironment.
Evidence
Auto mode schema and CLI output now include hard_deny (search for "Rules for the auto mode classifier HARD BLOCK section" and "autoMode.{allow, soft_deny, hard_deny, environment}")
Strings lifted out of the shipped bundle, so the claim above can be checked against them.