Evidence record / claude-code
A dated record of one change, kept so the writing that cites it can be checked. Compiled from the sources listed below by the research run, not written for reading. The judgment lives in the issues that cite it, below.
2026-10-24-claude-code-skill-grants-now-depend-more-closely-on-admitted-hooks-and-managed-settings
Skill grants now depend more closely on admitted hooks and managed settings. 304 gives settings.read hooks each settings layer and a rewrite of the merged result. A skill source can register at most 1,024 hooks and 16,384 matcher characters per session. A main-conversation skill loses allowed-tools when plugin-only hook policy excludes its hooks. 305 also removes allowed-tools from Desktop path-mounted plugins under allowManagedPermissionRulesOnly.
Channel: tagged-release. Half: both. Date: 2026-10-20.
Operator consequence: Re-test settings-rewriting mods and skills whose tool grants assumed their hooks would run. Hook admission and pre-approval must be reviewed together. The new ceilings support organization policy but can change effective retention settings and break oversized skill sources.
Receipt
Finding metadata
Run: 2026-10-24-weekly-digest-2026-10-13_2026-10-24-frontier-v0
Finding ID: 2026-10-24-claude-code-skill-grants-now-depend-more-closely-on-admitted-hooks-and-managed-settings
Profile citations
- Claude Code / claim / skill-grants-and-hook-admission
Source links
Primary links, including exact changelog lines when available.
Versioned source: run artifact