How to govern Claude Code
An agent that reads, edits and runs code in your repositories, with the oversight that autonomy demands.
Anthropic · Reviewed quarterly, and when the vendor ships a capability change or a customer declares the tool · Last reviewed 16 Oct 2026
No governance change Reviewed the three newest versions. The changelog carries version numbers but no dates, so the release date here is the review date. Local transcripts now record each request's system prompt, tools and parameters, request bodies are compressed to Anthropic even with telemetry off, Claude in Slack can answer in channels shared with other organisations when an administrator enables it, and several sandbox and permission bypass fixes landed. No change to what the tool does without approval in its listed use patterns. Full changelog ↓How Claude Code is used
We see two common ways businesses use Claude Code, and we govern each one on its own terms. If your team uses it differently, that is fine: you describe the use in your own words and Certrak works out the governance from what it actually does.
Code generation and review
Consequence to people: LowWriting or reviewing code, with a developer in the loop
Autonomous coding agent
Consequence to people: MediumCode AI operating in agent mode - taking actions across repositories, running commands, deploying
Governing Claude Code in practice
- Name one person who owns Claude Code in your business. Governance starts with a name.
- Write down what Claude Code is used for. Certrak recognises 2 common uses: Code generation and review and Autonomous coding agent. Yours may differ; write down yours.
- Decide what Claude Code may and may not be given. Internal business information is in scope, so name what stays out.
- A person reviews most outputs and exceptions are flagged. Agree what counts as an exception and who sees it.
- Claude Code can run code or scripts without a person approving. Record which of these you allow, and who can change that.
- Look at this again every month, and sooner on any of these: industry incidents, vendor model updates and autonomy level changes.
What changed, and how Certrak responded
We record every check here, including the ones that changed nothing. A check that found no governance change proves we looked.
-
No governance change Scheduled review
Claude Code changelog, versions 2.1.299 to 2.1.301
Anthropic shipped it 16 Oct 2026.
Reviewed the three newest versions. The changelog carries version numbers but no dates, so the release date here is the review date. Local transcripts now record each request's system prompt, tools and parameters, request bodies are compressed to Anthropic even with telemetry off, Claude in Slack can answer in channels shared with other organisations when an administrator enables it, and several sandbox and permission bypass fixes landed. No change to what the tool does without approval in its listed use patterns.