Architecture Development Notes

Oct 26, 2026 · Operations

Claude Code's Permission Audit Blind Spot: Why Rejection Counts Don't Reveal the Blocker

Claude Code's tool_decision events only capture accept/reject with a generic source field merging eight judgment sources, while the newer safety_event adds 14 categories but suffers from join gaps, attribute truncation, and missing events for unattended rejections, requiring joined audit tables and CI validation to identify actual blockers.