Goose v1.35.0 introduced a new tool-execution hooks system with PreToolUse denial support, enabling custom logic to run before and after each tool call and block disallowed actions before they execute.
Scattered source updates, isolated context, and manual follow-up across multiple feeds.
The release adds a concrete extensibility layer in the tool runtime: developers can register hook logic around tool calls and a PreToolUse denial hook to enforce policy decisions at execution time.
Developers and operators can now intercept tool calls before execution, so risky or policy-violating actions are more likely to be prevented instead of happening unexpectedly in active agent sessions. This is implemented via a new extensible pre/post tool execution hook pipeline and dedicated PreToolUse denial support, which should reduce unsafe automation fallout; watch for hook failures, ordering/precedence interactions, and whether denial paths surface clear user-visible diagnostics so legitimate workflows are not accidentally blocked.
Developers and operators can now intercept tool calls before execution, so risky or policy-violating actions are more likely to be prevented instead of happening unexpectedly in active agent sessions. This is implemented via a new extensible pre/post tool execution hook pipeline and dedicated PreToolUse denial support, which should reduce unsafe automation fallout; watch for hook failures, ordering/precedence interactions, and whether denial paths surface clear user-visible diagnostics so legitimate workflows are not accidentally blocked.