Auto Mode Hard-Deny Rules / Claude Code v2.1.136

What

Auto mode custom rules now distinguish soft blocks from hard security blocks.

Usage

{
  "autoMode": {
    "allow": ["$defaults"],
    "soft_deny": ["$defaults"],
    "hard_deny": [
      "$defaults",
      "Never send secrets to external endpoints"
    ],
    "environment": ["$defaults"]
  }
}

Details

soft_deny is now described as destructive or irreversible behavior that clear user intent can authorize.
hard_deny is new and covers security-boundary actions that user intent does not clear.
claude auto-mode defaults, claude auto-mode config, and claude auto-mode critique now understand all four categories: allow, soft_deny, hard_deny, and environment.

Evidence

Auto mode schema and CLI output now include hard_deny (search for "Rules for the auto mode classifier HARD BLOCK section" and "autoMode.{allow, soft_deny, hard_deny, environment}")

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.

v2.1.81 Auto Mode Rule Critique CLI

Auto Mode Hard-Deny Rules

Related