Follow Discord
Sweep 22 Oct 2026 · 21:04Z Build v2.1.309 528 read Stable v2.1.308 Latest v2.1.309 Next v2.1.309 Feeds RSS JSON llms.txt llms-full.txt Unofficial

Claude Code v2.1.228 ·

The model-based Bash command prefix classifier is gone

Bash permission checks no longer ask a model to figure out the command prefix.

You'll notice Removed
JSON All of v2.1.228
You'll noticeTier: how much it should matter to you
4Useful: my rating, 1 to 5
3Signal: worth watching, 1 to 5
PermissionsArea: what it touches
RemovedKind: in v2.1.228,
What probably matters to youSection of the release
What

Bash permission decisions no longer make a model call to extract a command prefix. The prompt, its command_injection_detected escape hatch and its example list are absent from the bundle, along with the caching class that drove it.

Evidence

command_injection_detected

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

See this entry in the whole of v2.1.228 →

Feedback