jochen 736743fedc claude-code: refuse registering what a session runs, so no agent can plant it in the operator's sessions ...

The tool runner is not told who called, so a hook, a managed setting, a
permission rule or a tool server registered through these tools could come
from an agent confined on another node and run as the operator there
(hq issue 340). They are set at the controller's terminal now; a skill,
subagent or command that runs something by itself is refused too, kept
hooks and settings are never rendered, and claude_code_registrations
lists what is registered and by which node.

2026-10-09 02:30:11 +02:00

..

claude-code

claude-code: refuse registering what a session runs, so no agent can plant it in the operator's sessions

2026-10-09 02:30:11 +02:00