{"version":"2.1.227","anchor":"command-clamps-deny-rather-than-fall-open","canonical_anchor":"command-clamps-deny-rather-than-fall-open","heading":"Command clamps deny rather than fall open","tier":"notice","area":"Subagents","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.227\/e\/command-clamps-deny-rather-than-fall-open","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.227","markdown":"### Command clamps deny rather than fall open\n\nIf a clamped agent's permission check crashes, the shell command is denied rather than allowed.\n\n**What**\n\nIf the permission check for a clamped agent throws, the Bash call is denied, not run, with the reason \"bashCommandClamp fail-closed: permission check crashed\". Shell surfaces the clamp cannot inspect, including PowerShell, are denied outright with a message telling the model to use the clamped Bash forms instead.\n\n**Details**\n\n- Each denial emits a `tengu_bash_command_clamp_denied` event carrying the number of clamp groups in force.\n\n**Evidence**\n\n`tengu_bash_command_clamp_denied`\n\n- Area: Subagents\n- Tier: You'll notice\n- Useful: 3\/5\n- Signal: 2\/5"}