diff --git a/plugins/config-audit/knowledge/claude-code-capabilities.md b/plugins/config-audit/knowledge/claude-code-capabilities.md
index da78245..5664893 100644
--- a/plugins/config-audit/knowledge/claude-code-capabilities.md
+++ b/plugins/config-audit/knowledge/claude-code-capabilities.md
@@ -1,6 +1,22 @@
 # Claude Code Configuration Capabilities
 
 > Source: Official Claude Code documentation (code.claude.com/docs), 75 pages, verified 2026-04-03.
+> Delta layer: research/03-claude-code-changes-config-surfaces.md (verified 2026-04-19) — sandbox/managed-only/prompt-cache surfaces added between v2.1.14 and v2.1.114.
+
+## 2026-04 deltas (research/03)
+
+| Surface | Added in | Notes |
+|---------|---------|-------|
+| `sandbox.*` (filesystem.allowRead/denyRead, network.deniedDomains/allowedDomains, enabled, failIfUnavailable, allowUnsandboxedCommands, enableWeakerNetworkIsolation) | ~v2.1.77–v2.1.83 | Sandbox configuration surface; managed-only variants exist for enterprise lockdown. |
+| `allowManagedHooksOnly`, `allowManagedMcpServersOnly`, `allowManagedPermissionRulesOnly`, `sandbox.filesystem.allowManagedReadPathsOnly`, `sandbox.network.allowManagedDomainsOnly` | ~v2.1.83–v2.1.84 | Enterprise policy enforcement — block any non-managed hook/MCP/permission. |
+| `disableSkillShellExecution` | v2.1.91 | Disables `!command` shell expansion in skill bodies. Prompt-injection mitigation. |
+| `forceRemoteSettingsRefresh` | v2.1.92 | Fail-closed on managed-settings fetch failure. |
+| `showClearContextOnPlanAccept` | v2.1.77 | Plan-mode opt-in to clear context after plan accept. |
+| `showThinkingSummaries` | v2.1.113 (default flipped to false) | Now opt-in. |
+| `tui`, `autoScrollEnabled` | v2.1.111 | Fullscreen terminal UI mode. |
+| `attribution.commit`, `attribution.pr` | 2026-04 | Granular replacement for legacy `includeCoAuthoredBy`. |
+| Env: `ENABLE_PROMPT_CACHING_1H`, `FORCE_PROMPT_CACHING_5M` | v2.1.108 | Explicit prompt-cache TTL control. |
+| Env: `CLAUDE_CODE_DISABLE_1M_CONTEXT`, `CLAUDE_CODE_DISABLE_ADAPTIVE_THINKING` | 2026-04 | Behavior opt-outs for new defaults. |
 
 ## Official Configuration Guidance (Anthropic)
 
diff --git a/plugins/config-audit/knowledge/feature-evolution.md b/plugins/config-audit/knowledge/feature-evolution.md
index a7eab26..fe9ae13 100644
--- a/plugins/config-audit/knowledge/feature-evolution.md
+++ b/plugins/config-audit/knowledge/feature-evolution.md
@@ -1,7 +1,7 @@
 # Claude Code Feature Evolution
 
 > Timeline of major features, most recent first. Covers features with configuration impact.
-> Source: Official Claude Code documentation, verified 2026-04-03.
+> Source: Official Claude Code documentation, verified 2026-04-03; 2026-04 entries verified via research/03-claude-code-changes-config-surfaces.md (2026-04-19).
 
 ---
 
@@ -9,6 +9,10 @@
 
 | Approx. Date | Feature | Config Impact |
 |-------------|---------|---------------|
+| 2026-04 (v2.1.111) | **Opus 4.7 + token-efficiency surfaces** | New env vars `ENABLE_PROMPT_CACHING_1H`, `FORCE_PROMPT_CACHING_5M`, `CLAUDE_CODE_DISABLE_1M_CONTEXT`. New settings keys around `tui` / `autoScrollEnabled`. Granular commit attribution via `attribution.commit` / `attribution.pr` (replaces `includeCoAuthoredBy`). |
+| 2026-04 (v2.1.83+) | **Sandbox + managed-only enterprise lockdown** | Added settings keys: `sandbox.enabled`, `sandbox.failIfUnavailable`, `sandbox.allowUnsandboxedCommands`, `sandbox.filesystem.allowRead/denyRead`, `sandbox.network.deniedDomains/allowedDomains`, `sandbox.enableWeakerNetworkIsolation`. Managed-only flags: `allowManagedHooksOnly`, `allowManagedMcpServersOnly`, `allowManagedPermissionRulesOnly`. |
+| 2026-03 (v2.1.91) | **`disableSkillShellExecution`** | Blocks inline `!command` shell expansion in skills. Mitigates skill-side prompt-injection vector. |
+| 2026-03 (v2.1.92) | **`forceRemoteSettingsRefresh`** | Fail-closed on managed-settings fetch failure (previously fail-open). |
 | Q1 2026 | **Agent Teams (experimental)** | Enable via `CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS=1` or env in settings.json. Configure display mode via `~/.claude.json` `teammateMode`. Hooks: `TeammateIdle`, `TaskCreated`, `TaskCompleted`. |
 | Q1 2026 | **Elicitation events** | `Elicitation` and `ElicitationResult` hook events added. MCP servers can request user input; hooks control and log these requests. |
 | Q1 2026 | **`SubagentStart` / `SubagentStop` hooks** | Added hook events for subagent lifecycle. `SubagentStop` is blocking — exit code 2 acts as a quality gate. |
diff --git a/plugins/config-audit/knowledge/hook-events-reference.md b/plugins/config-audit/knowledge/hook-events-reference.md
index a67671b..d20093a 100644
--- a/plugins/config-audit/knowledge/hook-events-reference.md
+++ b/plugins/config-audit/knowledge/hook-events-reference.md
@@ -1,6 +1,7 @@
 # Hook Events Reference
 
 > All 26 hook events as of April 2026. Source: code.claude.com/docs/en/hooks.md
+> Verified 2026-04-19 against research/03-claude-code-changes-config-surfaces.md — no new hook events introduced in v2.1.83–v2.1.111. Sandbox + managed-only flags (2026-04) operate at the settings layer, not as new hook events.
 
 ---