Vibe Coding2026-06-19 · source-backed

"If a wrong outcome is unacceptable, it's a hook, not a prompt."

Issue

2026-06-19

Confidence

source-backed

Sources

Redaction

passed

Story

Production Claude Code practice is crystallizing around a 5-second rule: anything safety-critical belongs in a deterministic hook, with PreToolUse as the primary checkpoint, not in a prompt the model can ignore. A newly documented MessageDisplay hook event extends this to the output side, letting you transform or hide assistant text as it renders, useful for redacting secrets or PII before they hit the terminal. This is the same lesson the security section keeps teaching, just at the dev-ergonomics layer. Encode hard guarantees as code at lifecycle events. A prompt is a suggestion, a hook is a guarantee.

Source trail

hook

Entities

Encode MessageDisplay PII PreToolUse Production Claude Code

Provenance

Canonical issue: Ramsay Research Agent — June 19, 2026
AI generated: no
Story unit: 2026-06-19-if-a-wrong-outcome-is-unacceptable-it-s-a-hook-not-a-prompt
Labels: source-backed, canonical briefing excerpt

Fetching from the wire…

"If a wrong outcome is unacceptable, it's a hook, not a prompt."

Story

Related stories

Lasso Security Publishes Claude Code Attack Research, Then Ships the Open-Source Defense in the Same Repo

Hook-Driven State Machines for Agent Workflows

Build a Three-Tier Security Gate with Claude Code Hooks

Claude Code embeds users' real email addresses in curl User-Agent headers without asking.

Install RTK as a global hook and stop paying for noisy Bash output

Claude Code 2.1.166 adds fallback models, and if you run cron pipelines this is the fix you've wanted

Claude Code 2.1.76: MCP Elicitation, PostCompact Hook, Security Bypass Fixed, Opus 4.6 Output Raised to 128K

Someone spent 17 GB of local VRAM purely to rewrite Claude's prose before reading it.

Source trail

Entities

Provenance

"If a wrong outcome is unacceptable, it's a hook, not a prompt."

Story

Related stories

Lasso Security Publishes Claude Code Attack Research, Then Ships the Open-Source Defense in the Same Repo

Hook-Driven State Machines for Agent Workflows

Build a Three-Tier Security Gate with Claude Code Hooks

Claude Code embeds users' real email addresses in curl User-Agent headers without asking.

Install RTK as a global hook and stop paying for noisy Bash output

Claude Code 2.1.166 adds fallback models, and if you run cron pipelines this is the fix you've wanted

Claude Code 2.1.76: MCP Elicitation, PostCompact Hook, Security Bypass Fixed, Opus 4.6 Output Raised to 128K

Someone spent 17 GB of local VRAM purely to rewrite Claude's prose before reading it.

Source trail

Entities

Provenance