What
If the permission check for a clamped agent throws, the Bash call is denied, not run, with the reason "bashCommandClamp fail-closed: permission check crashed". Shell surfaces the clamp cannot inspect, including PowerShell, are denied outright with a message telling the model to use the clamped Bash forms instead.
Details
- Each denial emits a
tengu_bash_command_clamp_deniedevent carrying the number of clamp groups in force.
Evidence
tengu_bash_command_clamp_denied
Strings lifted out of the shipped bundle, so the claim above can be checked against them.