Lead · Practice
When a policy hook breaks, the default is to let everything through, so your gate may have been dead all along until someone mistyped a single path.
Derek Finch
·
October 10, 2026
Claude Code v2.1.295 (October 8, 2026) adds onFailure: "Block" for command and HTTP hooks. The changelog describes it as blocking the action when a hook cannot start, times out or exits unexpectedly. To see what it fixes, start with the old default behavior.The Old Default Was Fail-OpenThe official hooks documentation is explicit: for most events, when a script path does not exist or is not...