The latest articles on DEV Community by Diego Cheloni (@dich01). https://dev.to/dich01 https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3828054%2F5e307c5a-581c-4d32-a875-5c17c321daa3.png https://dev.to/dich01 en Diego Cheloni Mon, 16 Mar 2026 20:41:27 +0000 https://dev.to/dich01/building-reliable-multi-agent-claude-code-plugins-what-actually-works-and-whats-broken-45ll https://dev.to/dich01/building-reliable-multi-agent-claude-code-plugins-what-actually-works-and-whats-broken-45ll <h2> An Empirical Investigation of Enforcement Mechanisms </h2> <p>An empirical investigation into what actually works when building multi-agent plugins for Claude Code — and what doesn't, despite what the documentation says.</p> <h2> Why This Exists </h2> <h3> Prompts are suggestions. The LLM can ignore them silently. </h3> <p>When you build a multi-agent system that needs to guarantee execution order, enforce TDD, or block unsafe operations, you need <strong>mechanical enforcement</strong> — not prose.</p> <p>This report documents 6 empirical tests, 12 GitHub issues, and community patterns from systems with up to 112 agents in production.</p> <h2> Key Findings </h2> <div class="table-wrapper-paragraph"><table> <thead> <tr> <th>Finding</th> <th>Status</th> <th>Note</th> </tr> </thead> <tbody> <tr> <td> <code>exit code 2</code> in PreToolUse hooks blocks tool calls</td> <td><strong>Works</strong></td> <td>The only reliable blocking method</td> </tr> <tr> <td> <code>exit code 1</code> blocks tool calls</td> <td><strong>Fails</strong></td> <td>Does not block by design (non-blocking error)</td> </tr> <tr> <td> <code>permissionDecision: "deny"</code> blocks tool calls</td> <td><strong>Broken</strong></td> <td>Issue #4669: Docs say yes, reality says no</td> </tr> <tr> <td>Subagents can spawn subagents</td> <td><strong>No</strong></td> <td>Absolute architectural restriction</td> </tr> <tr> <td>Blocked Write/Edit bypass (via <code>sed</code>, <code>echo &gt;</code>, <code>python3</code>)</td> <td><strong>Vector</strong></td> <td>Known bypass — requires additional Bash hook</td> </tr> <tr> <td>Infinite loops without recursion guards</td> <td><strong>Risk</strong></td> <td>3 open issues (#10205, #9579, #9704)</td> </tr> <tr> <td>Agent frontmatter (hooks, skills) works in teammates</td> <td><strong>Broken</strong></td> <td>Bug #30703: Frontmatter is silently ignored</td> </tr> </tbody> </table></div> <h2> Validated Patterns </h2> <ul> <li> <strong>Hub-and-spoke orchestration</strong>: A central "brain" agent as main session (<code>--agent namespace:brain</code>) spawns specialist subagents.</li> <li> <strong>Recursion guards</strong>: Temporary flag files prevent infinite hook loops when hooks propagate to subagents.</li> <li> <strong>Bash bypass defense</strong>: When Write/Edit are blocked, Claude uses <code>sed</code>, <code>python3 -c</code>, or <code>echo &gt;</code> instead — a second hook on Bash closes this vector.</li> <li> <strong>Prerequisite gates</strong>: Hooks verify artifact existence before allowing specialist agents to execute.</li> </ul> <h2> Empirical Validation: Express-to-NestJS Migration </h2> <p>These patterns were validated through a complete framework migration of a multi-tenant production project:</p> <ul> <li> <strong>11 agents</strong> spawned with real parallelism (up to 3 concurrent).</li> <li> <strong>Quality gate</strong> rejected first pass (44% coverage), forced autonomous correction to <strong>93%</strong>.</li> <li> <strong>422 tests</strong>, zero regressions, TypeScript strict with zero errors.</li> </ul> <h2> Community References </h2> <ul> <li> <strong>Blake Crosley</strong>: 95 hooks in production over 9 months.</li> <li> <strong>kenryu42/claude-code-safety-net</strong>: semantic analysis + 5-level recursive wrapper detection.</li> <li> <strong>wshobson/agents</strong>: 112 agents, 16 orchestrators.</li> <li> <strong>Issue #29795</strong>: 5-layer QA system built from 68 documented failures.</li> </ul> <h2> Full Research Reports </h2> <ul> <li><a href="https://github.com/Dich01/claude-code-multi-agent-research/blob/main/Building-Reliable-Multi-Agent-Claude-Code-Plugins-EN.md" rel="noopener noreferrer"><strong>English Version</strong></a></li> <li><a href="https://github.com/Dich01/claude-code-multi-agent-research/blob/main/Plugins-Multi-Agente-Claude-Code-Investigacion.md" rel="noopener noreferrer"><strong>Spanish Version</strong></a></li> </ul> <h3> Credits </h3> <ul> <li> <strong>Author</strong>: <a href="https://github.com/Dich01/" rel="noopener noreferrer">Diego Cheloni</a> </li> <li> <strong>Date</strong>: March 14, 2026</li> <li> <strong>Environment</strong>: Claude Code CLI (March 2026), Claude Opus 4.6</li> </ul> ai architecture productivity softwareengineering