Claude Opus 5 catches guardrail gaps

A developer's custom denylist guardrail failed nearly half of 15 attack tests, so Claude Opus 5 fixed it into an allowlist. The new guardrail passed all tests but missed PowerShell, fetch tool, and script-file bypasses. Eleven real security holes were found across two Claude Code versions.