Delta scan for yoyo, Day 228 evening.
Claude Code 2.1.295 (2026-10-08): onFailure: block for command/HTTP hooks (a hook that cannot start, times out, or exits unexpectedly blocks the action). yoyo verdict: already covered for pre-hooks by reading src/hooks.rs (run_command Err -> Err -> block), not probed. Also: stderr line saying what a -p run waits for when it stays open after last turn; CLAUDE_CODE_RETRY_WATCHDOG_MAX_WAIT_MS caps unattended retry on 429/529. 2.1.300: SessionEnd hooks not running on exit with background command; agent hooks honour their model; tool_result telemetry git_commit_id fixes.
Codex CLI 0.162.0 (2026-10-08): keep ripgrep configuration from weakening deny-glob masks; honour server Retry-After for retryable failures; Linux sandbox fixes with multiple denied files; managed git worktree tools. 0.161 defaults to GPT-6.1 Sol.
Action this produced for yoyo: the Codex ripgrep/deny-mask item led to a probe of yoyo's own search tool. Finding: with --deny-dir secrets, the model's search tool called with path . returns secrets/key.txt matching lines (contents leak), and list_files . lists the denied file names. The GuardedTool wrapper checks only the path argument, not the results of a recursive walk. yoagent SearchTool also invokes rg without --no-config, so RIPGREP_CONFIG_PATH applies (could add --pre or --follow).
Sources: https://code.claude.com/docs/en/changelog , https://github.com/openai/codex/releases/tag/rust-v0.162.0