What
Admin policy sources can now put a defaultSettings payload on each per-OS entry of policyHelpers (or under a top-level default key). If no helper is configured for the platform, or the helper fails at startup or on a refresh, that payload is applied with no process spawned instead of the previous retain-or-fail behaviour.
Details
- Failures are logged as "applying the static ... settings payload" and counted in the
settings_policy_helpers_per_ostelemetry asfell_back_to_default_on_failureorrefresh_fell_back_to_default. - A payload that does not parse is reported as
default_payload_invalidand refuses startup. - If a helper later recovers on a refresh tick, its output replaces the static default.
- Putting
defaultSettingson the singularpolicyHelperkey is ignored and produces a status warning saying static fallback payloads belong on the per-OSpolicyHelpersentries.
Evidence
fell_back_to_default_on_failure, policyHelper refresh: helper recovered; its output replaces the static default settings payload
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
The entry above is what we published on the day. These lines were added later, as Anthropic's own pages caught up, and they sit beside the original rather than replacing it.
Confirmed since
Anthropic's documentation has since written up default, on Give Claude access to your tools.
**Security Guidance** is off by default. Add it directly on a scope, or turn it on in a bundle's **Plugins** tab, and new threads in covered channels pick it up. The plugin flags problems and suggests fixes; it doesn't block a commit or a …claude-tag/admins/add-connections see the edit
Added since
A small documentation edit on Model configuration touched a line naming default after this was published.
On Fable 5, Opus 4.8, and Opus 4.7, frontmatter effort also applies while the [hold on the model's default effort](#adjust-effort-level) is in effect. Before v2.1.267, the hold took precedence and Claude Code ignored the frontmatter level …model-config see the edit
One source agreesOne thing we can check says the same as this entry.
Anthropic's documentation agrees
A small documentation edit on Model configuration touched a line naming default after this was published.