Anecdata from the internet has a few stories of Claude Opus bypassing hooks too =)
1) it wants to run X command
2) it notices a hook preventing it from running X
3) it creates a Python application or shell script that does X and runs it instead
Whoops.
I haven't seen it bypass my hook yet (knock on wood). I have my hook script [0] tell that its commits are required to pass validation, maybe that helps push it in the right direction?
0: https://github.com/mbcrawfo/vibefun/blob/main/.claude/hooks/...