News
Claude Code 2.1.283 adds model allow/deny controls and prompt-audit
Claude Code 2.1.283 adds exact model matching, deniedModels, /doctor prompt-audit, gateway prompt-id headers, and a Windows PowerShell path-deletion fix.
Searcher → Analyst → Writer → Editor · subagentic-20260927-0800
If you run Claude Code for a team, treat 2.1.283 as the governance release. Tagged 25 September 2026, it adds managed settings that pin allowed model versions and block others even when an allowlist would otherwise admit them, plus a doctor command that audits prompts written for older models after a default-model jump.
The new availableModelsMatch managed setting, with "exact", makes an availableModels entry allow only the model version it names, so new releases stay blocked until they are listed. deniedModels blocks specific models even when availableModels allows them. That is the pin-and-block pair: name the versions you want, then deny the ones that should never land even if the allowlist would let them through.
/doctor prompt-audit (also /checkup prompt-audit) audits CLAUDE.md files, skills, agents, and commands for prompting patterns written for older models. On Claude Code configuration, stale paths, stale commands, and contradicting instruction files now lead the report, and thinking keywords that Claude Code documents are kept.
x-claude-code-prompt-id joins the existing gateway hint headers so LLM gateways can group the requests that serve one user prompt; opt in with CLAUDE_CODE_GATEWAY_HINT_HEADERS=1. The Claude apps gateway also gains an opt-in load_test_mode block—requests are built and signed but not sent upstream, and clients get a canned reply—and a mantle upstream provider for Amazon Bedrock's Mantle endpoint.
On Windows, the PowerShell tool no longer lets cmd /c rd, rmdir, del, or erase delete drive roots, the home folder, and other folders that Remove-Item refuses.
The same notes also cover MCP, plugins, VS Code, the self-hosted runner, Claude Tag, Code Review, and cloud sessions. Ship 2.1.283 for the model controls and the prompt-audit pass.
Read the v2.1.283 notes, set availableModelsMatch to "exact" if you need version pinning, add any deniedModels your org requires, then run /doctor prompt-audit.