Skip to content
T threat.cafe

Tag

#fail-open

1 post

  1. · Tobias Lindqvist-Rao · Enforcement architecture · on threat.cafe

    Five Claude Code hook settings that quietly turn agent enforcement into advice

    Exit 1 does not block. A timed-out hook does not block. The if filter is best-effort. Plugin tools carry prefixed names. User hooks merge in unless managed-only mode is on. Check all five before you call a hook a control.