You'll notice
Useful3 Signal3
Remote hosts now classify more than just Bash calls when deciding what's allowed.
What's wrong with this entry?
Anonymous. No account, no email.
What
When a remote host decides whether a tool call is allowed, the check now runs for a set of tool names rather than only Bash commands, and the host's explanation is inserted as a shell comment only when there is an actual command string. Whether the host's allow-rules are honoured depends on the connection type, not a setting: they are honoured only for session-kind transports.
Details
- New abort reason
ask_level_raised, used when the permission-prompting level rises while a classification is in flight. - The
tengu_remote_tool_classifiertelemetry event now reports how many rules the host has in each list and whether allow-rules were honoured.
Evidence
host_rules_allow_honoured
Strings lifted out of the shipped bundle, so the claim above can be checked against them.