
A Withheld Plugin Result Is Not the Tool Never Ran
A denied tool with no result in chat is not proof the tool never ran. Print withheld plugin result versus never ran versus the named Claude Code owner before you file the wrong ticket.
45 posts tagged with #Coding-Agents

A denied tool with no result in chat is not proof the tool never ran. Print withheld plugin result versus never ran versus the named Claude Code owner before you file the wrong ticket.

A quiet Read on a network share after you approved a local folder, or after auto mode, is not proof always-ask is off. Print UNC versus local versus the named Claude Code owner before you file the wrong ticket.

A skill tool that still runs after you leave plan or auto is not proof the mode never changed. Print leftover allowed-tools, the current mode, and the named Claude Code owner before you file always-ask-broken.

A phone yes that reuses a reply ID is not a second human allow. Print the ID, the open request, and the named Claude Code owner before you file always-ask-broken.

A trycloudflare.com URL with --allowed-mail is email OTP on a Quick Tunnel, not a Cloudflare account on either side. Print allowed-mail, account, and the named Tunnel owner before you file Access-broken.

A user-installed mod that approves one nested piece of a compound shell is not proof deny is off. Print the nested rule, the approval source, and the named Claude Code owner before you file allow-broken.

A 40-character check on a ghs_ string is not proof the GitHub App token is invalid. Print length, opacity, and the named App owner before you file a broken-auth ticket.

A missing always-ask prompt on a dangerous rm is not proof always-ask is off. Print the redirect, the prompt, and the named Claude Code owner before you file the ticket.

An every-run prompt on python3 -c is not proof that sandbox auto-allow is off. Print the equals matcher, the auto-allow setting, and the named Claude Code owner before you file an auto-allow-broken ticket.

A GitHub changelog that moves a self-hosted runner date is not permission to skip the fleet. Print the moved date, the registration floor, the runtime floor, and the named Actions-runner owner before you file all-clear.

A GitHub Actions badge that says 2,500+ is a capped count, not a run inventory. Print the cap, the 1,000-item page, a date-range filter, and the named Actions owner before you file missing runs.

An auto-started Codex background server is not proof session settings match. Print auto-start, the recovery choice, and the named Codex owner before you file an all-clear.

A green wrangler deploy is not proof Durable Object code is live. Print the deploy, the code-update strategy, and the named Workers owner before you file an all-cutover.

A green /readyz is not proof Postgres is healthy. Print the ready status, the store probe, and the named gateway owner before you file an all-clear.

A permission rule that contains a NUL byte is not a wildcard allow. Print the rule bytes, the match-nothing result, and the named permission-rule owner before you file an allow-all ticket.

A job that hits its timeout is not a dead worker pool. Print the job timeout, the worker kill, and the named queue:work owner before you file an outage.

A docker glob that matches one command is not a sandbox exemption for npm ci && docker build. Print the glob, split every part, and name who owns sandbox.excludedCommands before you file a hole.

A failed local DNS lookup on a Claude apps gateway pod is not a missing host when the pod only talks through a forward proxy. Print the env, read the boot network line, and name who owns proxy-only egress.

A repo-root AGENTS.md is not Claude Code’s project instructions while CLAUDE.md or CLAUDE.local.md exists. Print the load line, open /config, and name who owns the instruction file.

A green Laravel or Vue workflow on ubuntu-latest is still today's image, not the image GitHub will move that label onto. Print the label, the named pin, the test job, and the workflow owner before the migration window.

A Wrangler onboarding write for a missing previews block is a warning, not permission to point preview at production KV, D1, or secrets. Print the block, the placeholder, and the named config owner before you ship.

An old MCP client that still opens with initialize is a handshake the new Laravel server still answers, not a dead 1.0 package. Print the method, the pin, and the named owner before you file the server.

A red WebFetch at five minutes is a download deadline, not a stuck model. Print the named CLI pin, the deadline env, and the named owner before you page the model.

A wall of HTTP 400s on a named Claude Code base URL is a schema reject, not a status outage. Print the 400 body, the named URL, and the named CLI pin before you page the gateway.

A remote or headless row that says waiting for your input is not done. Open the agent list, split Needs input from Working, and name who owns the CLI pin.

When import.meta.url fails on a Worker, Node.js APIs are already on. Name who owns the compat-flag list before the coding agent flips the wrong switch.

When a managed allow-list cannot be read, Claude Code now admits nothing. Classify the block, name who owns the file, then resume the coding agent.

A failed Cloudflare CLI login is a requested-scope list, not a status page. Copy the unknown scope, name who owns the CLI pin, then resume the coding agent.

An Organization policy line on /status can explain a miss. It does not prove the fleet policy loaded. Read claude doctor, name the proxy owner, then resume coding.

A deferred Inertia group named auth is a request batch, not a PHP function. A red loadDeferredProps test is not a missing Vue prop. Name who owns the group strings.

GitHub Issues are off on most Laravel packages. The ticket is a pull request that documents the bug, with a named owner. laravel/framework Issues stay on.

A Copilot content exclusion is a policy row. App and CLI now honor it. Agent chat in the editor still can. Name the owner of the list and of the surface before you call a secret recovered.

GitHub now prints a ready-to-approve assessment on every Copilot review. That line is a note. The admin switch that turns it into a required approval is off by default. Keep it off.

A ranked cheat-sheet of five desk rules from this week: who pins the model, what .gitignore does not lock, who merges, who retries, and who still reads the diff.

The agent that writes the diff does not choose the model for that pull request. A named human pins the model before the session starts. Auto is a vendor default, not an owner.

A coding agent may open the pull request. A named human still owns the merge click. Treat GitHub agent merge and auto-merge as opt-in shortcuts, never as the default.

An interrupted MCP tool in a headless coding-agent session used to look finished. Treat empty completion as a bug until the harness asserts an interrupted error.

Chat said done is not recovered. I wait for a file on disk, a job log that names why the run stopped, and one fail-once restart from the last good commit.

A generated migration that runs locally is not a production contract. Before an AI coding agent rewrites columns, require expand steps, dual-read boundaries, backfill evidence, worker compatibility, and an explicit rollback decision.

A practical way to decide whether a resumed coding-agent run is safe to continue: inspect local evidence, enforce command gates, review the diff, preserve test logs, and make rollback cheap.

Treat repository instructions for coding agents as a governed change-control system: owned, reviewed, scoped, evidenced, and reversible.

Grok 4.5 is now available on the xAI API with pricing and reasoning controls that make developers pay attention. The real adoption test is whether it survives your local coding-agent harness.

A current guide to keeping AI coding-agent instructions, verification, approval, and rollback in the repository so a tool or model change does not rewrite release control.

A long-running coding agent can stay green after it changes directory. Production still needs a sandbox that survives /cd, a budget that counts nested work, and a human who owns both.

Z.AI's GLM 5.2 (744B MoE, 1M context, MIT license) tops open-weights benchmarks and runs coding agents at frontier level. Full breakdown.
Also see: #Coding-Agents #Change-Control #Claude-Code #Laravel #Vue
Type at least 2 characters to search.