Permission rules can finally match a tool's arguments (Agent(model:opus))
What this changes for operators
- 2.1.178 added Tool(param:value) syntax so a rule can match input parameters, e.g. Agent(model:opus) blocks Opus subagents; permissions move from all-or-nothing per tool to per-argument.
- Operators governing delegated trees should reach for this to cap model tiers and arguments inside subagents.
Signal metadata
Source findings
- 2026-06-15-claude-code-tool-param-value-permission-syntax 2026-06-15-claude-code-tool-param-value-permission-syntax
Run: 2026-06-16-weekly-digest-2026-06-04_2026-06-16-frontier-v0
Schema: bitter.frontier_signals.v0 · ID: 2026-06-15-claude-code-argument-aware-permissions
Signals are produced by the Bitter autonomous research loop.