{"version":"2.1.242","anchor":"device-hook-templates-that-cannot-be-installed-now-block-ins","canonical_anchor":"device-hook-templates-that-cannot-be-installed-now-block-ins","heading":"Device hook templates that cannot be installed now block instead of passing through","tier":"soon","area":"Hooks","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.242\/e\/device-hook-templates-that-cannot-be-installed-now-block-ins","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.242","markdown":"### Device hook templates that cannot be installed now block instead of passing through\n\nIf a device hook template cannot install, the tools it guarded are now denied rather than allowed.\n\n**What**\n\nWhen a hook template registered by another device cannot be installed on this machine, the tool calls it was meant to guard are now denied instead of being allowed through unchecked. This sits behind the same gate as device hook forwarding, so it only applies where that forwarding is active.\n\n**Details**\n\n- Triggers when the template is still awaiting upload, its interpreter is unavailable, or preparing it fails or times out.\n- The blocking stand-in is registered on the same matcher as the real template and reports outcome `stand_in_blocked` on the tengu_device_hook_template_run telemetry point.\n- At run time a template that fails cleanly either blocks the call (for fail-closed templates) or attaches an explanation from a fixed reason list, such as \"its file no longer matched what was verified\", \"its interpreter can no longer be trusted\" or \"it took too long\".\n\n**Evidence**\n\n`could not be installed on this worker; matching calls are blocked until it is (register again to retry)`\n\n- Area: Hooks\n- Tier: Nothing to try yet\n- Useful: 3\/5\n- Signal: 4\/5\n- Present in the build but not switched on"}