Comment by dear-leader
13 days ago
I actually had this happen to me just last week. Claude let me know about it and blamed it on a sub agent, saying something to the effect of “This was my bad. I explicitly told them not to do this and one agent did it anyway. I should have checked their commands but I didn’t.”
Claude then saved a note not to do this to memory, which gives me absolutely no faith that it won’t happen again.
One more thing that could help: memory is only context for Claude Code, so use a PreToolUse hook that blocks the command itself.
A hard part is that the hook blocks only 1 command and does not carry the reason to the next session.
On Substrate there is also 1 memory outside of any agents, where every fact has a source.
Did the saved note appear in the next session? https://trysubstrate.co/l/a3hn