What
An agent restricted to a specific set of allowed shell commands is now denied when it tries to run through PowerShell or the Monitor tool's websocket mode, not just Bash. A crash inside the permission check now denies for those agents rather than letting the command through.
Details
- Denials carry a dedicated reason, e.g. "bashCommandClamp: no clamp rule matches this command".
- Bash denials emit a
tengu_bash_command_clamp_deniedevent. - The permission check now fails closed for clamped agents; previously an error in the check could result in execution proceeding.
Evidence
bashCommandClamp: no clamp rule matches this command
Strings lifted out of the shipped bundle, so the claim above can be checked against them.