Fetching from the wire…
01
02
03
04
05
06
07
08
Agents2026-08-28 · source-backed
Block released it August 27 with a security section dominated by defaults that previously failed open: fail closed on malformed tool visibility, permission denies now take precedence, fail closed on invalid default GCP credentials and invalid Codex ACP mode, honor plugin enablement for skills, honor MCP tool model visibility in Code Mode, sanitize Unicode tags in MCP prompts, bound recursive mention scans (GitHub). Same release adds an on_failure block for PreToolUse hooks and a stable tool_call_id across the tool lifecycle. That many fail-open bugs in one release is a signal about how the permission code was written, not about any single bug.
Each link below shares sources, entities, or timing with this story.
Goose supports MCP / Shared entities / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (Goose supports MCP); both cover August, GitHub, MCP, PreToolUse; reported by the same outlet (github.com).
Linked by a graph relationship (Goose supports MCP); both cover August, GitHub, MCP, Same; reported by the same outlet (github.com).
Linked by a graph relationship (Goose supports MCP); both cover August, GitHub, MCP; reported by the same outlet (github.com).
Linked by a graph relationship (Goose supports MCP); both cover August, GitHub, MCP; reported by the same outlet (github.com).
Goose supports MCP / Shared entities / Same source domain / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Goose supports MCP); both cover August, GitHub, MCP; reported by the same outlet (github.com).
Claude Code uses MCP / Shared entities / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (Claude Code uses MCP); both cover August, GitHub, Same; reported by the same outlet (github.com).
Goose supports MCP / Shared entities / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Goose supports MCP); both cover August, GitHub, MCP; overlapping topics (august, closed, code, fail).
Cloudflare released Code Mode / Shared entities / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Cloudflare released Code Mode); both cover August, Code Mode, MCP; overlapping topics (august, code, tool).