What
The managed-settings policy helper, an admin-controlled hook that supplies settings at startup, now takes separate entries for macos, linux, windows and wsl plus an optional default entry that is a plain settings payload rather than a program to run. A helper that fails at startup or refresh falls back to that static payload without spawning anything.
Details
- Helper paths must be absolute, normalized and at most 1024 characters, with no control or invisible characters and no
.or..segments. - On Windows, UNC and drive-relative forms are rejected and the path must end in
.exe; on POSIX,/procand/netmagic roots are rejected. - Only honored from admin-controlled policy sources, not from user or project settings.
Evidence
path must end in .exe on Windows
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
Names in the bundlepolicyHelpersdefault
The entry above is what we published on the day. These lines were added later, as Anthropic's own pages caught up, and they sit beside the original rather than replacing it.
Confirmed since
Anthropic's documentation has since written up default, on Give Claude access to your tools.
**Security Guidance** is off by default. Add it directly on a scope, or turn it on in a bundle's **Plugins** tab, and new threads in covered channels pick it up. The plugin flags problems and suggests fixes; it doesn't block a commit or a …claude-tag/admins/add-connections see the edit
Added since
A small documentation edit on Model configuration touched a line naming default after this was published.
On Fable 5, Opus 4.8, and Opus 4.7, frontmatter effort also applies while the [hold on the model's default effort](#adjust-effort-level) is in effect. Before v2.1.267, the hold took precedence and Claude Code ignored the frontmatter level …model-config see the edit
One source agreesOne thing we can check says the same as this entry.
Anthropic's documentation agrees
A small documentation edit on Model configuration touched a line naming default after this was published.