{"version":"2.1.268","anchor":"secdefault-managed-settings-key-removed","canonical_anchor":"managed-plugin-hook-seating-can-now-be-driven-by-a-managed","heading":"Managed prependPlugins\/appendPlugins replace the old secDefault setting for hook ordering","tier":"use","area":"Managed Settings","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.268\/e\/secdefault-managed-settings-key-removed","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.268","markdown":"### Managed prependPlugins\/appendPlugins replace the old secDefault setting for hook ordering\n\nOrgs now control which plugin's hooks run first or last via prependPlugins\/appendPlugins instead of the old secDefault boolean\n\n**Unclear.** The finding does not say what, if anything, replaces `secDefault`.\n\n**What**\n\n- Two new managed-settings keys, `prependPlugins` and `appendPlugins`, let an organization list plugin ids (in the form `plugin@marketplace`) whose hooks must run first (outermost) or last (innermost) among the plugins in the hooks chain.\n\n- The built-in `sec-default` hooks module (Claude Code's default security\/policy protection hooks) now checks whether the org's `prependPlugins` list includes `sec-default@builtin`, and reports its seating reason as \"seated by managed prependPlugins at position N\" or \"not seated: managed prependPlugins does not list it\".\n\n- The old `secDefault` managed-settings boolean, which used to just seat the bundled sec-default plugin outermost (and had a special warning when shadowed outside managed settings), is removed entirely - no references to it remain.\n\n**Why**\n\nThis replaces a single yes\/no switch for the built-in security hooks with a general-purpose ordering mechanism, letting organizations control exactly where any plugin's hooks sit in the chain (not just whether the default security hooks run first), while keeping the ability to opt out of or explicitly retain that default seating.\n\n- Area: Managed Settings\n- Names: `secDefault`\n- Tier: Use it now\n- Useful: 4\/5\n- Signal: 3\/5"}