{"name":"tengu_org_policy_denied","slug":"tengu-org-policy-denied","family":"flag","title":"Feature flags","noun":"feature flag","description":"Blocked remote-session actions from org policy now emit a tengu_org_policy_denied telemetry event","description_source":"entry","described_by":{"version":"2.1.268","anchor":"remote-session-org-policy-denials-now-emit-telemetry"},"presence":{"first_seen":null,"removed_in":null,"in_current_build":false,"newest_mined":"2.1.322","builds":0,"mined_builds":161,"first_cited":{"version":"2.1.268","released_at":"2026-09-10 18:41:11","spans":1}},"aliases":[],"entries":[{"version":"2.1.321","anchor":"connector-block-count-answered-by-policy","heading":"Organization policy on connectors now has a count-only setting","line":"How organization policy hides connectors now has three states instead of on or off, including one that only recounts them","released_at":"2026-11-09 19:02:47","reason":"gate cited by this entry"},{"version":"2.1.296","anchor":"session-archived-added-to-a-denial-telemetry-detail","heading":"Denial reports can now say the session was archived","line":"A usage report for denials now includes `session_archived` when the session had been archived","released_at":"2026-10-09 16:58:10","reason":"gate cited by this entry"},{"version":"2.1.296","anchor":"tengu-org-policy-denied-fallback-default-changed-from-60-to","heading":"A remote setting tied to organization policy denials now defaults to 1 instead of 60","line":"A remotely controlled setting tied to organization policy denials now has a built-in fallback of 1 instead of 60","released_at":"2026-10-09 16:58:10","reason":"gate cited by this entry"},{"version":"2.1.296","anchor":"remote-control-gate-helper-and-new-tengu-org-policy-denied-d","heading":"New check skips policy limits for remote, non-subscriber and trusted-device setups","line":"A new check skips waiting for organization policy limits when running remotely, with login disabled, on a trusted device, or without a claude.ai plan","released_at":"2026-10-09 16:58:10","reason":"gate cited by this entry"},{"version":"2.1.285","anchor":"managed-policy-read-failure-message","heading":"Clear error when managed policy settings cannot be read","line":"Claude Code has a new error saying it could not read managed policy settings, which may restrict allowed API providers","released_at":"2026-09-29 17:32:09","reason":"gate cited by this entry"},{"version":"2.1.285","anchor":"org-policy-denial-helper-checks-remote-control-taints","heading":"New check for when organization policy blocks remote control","line":"Claude Code now treats remote control as blocked by organization policy only when the denial is final and the policy disallows it with markers present","released_at":"2026-09-29 17:32:09","reason":"gate cited by this entry"},{"version":"2.1.285","anchor":"unverified-github-repo-visibility-can-be-marked-policy-denie","heading":"Repositories whose visibility cannot be verified can be treated as blocked by policy","line":"If Claude Code cannot confirm whether a GitHub repository is public or private, it can now treat it as denied by organization policy","released_at":"2026-09-29 17:32:09","reason":"gate cited by this entry"},{"version":"2.1.285","anchor":"auto-mode-org-default-notice-string","heading":"New notice when auto mode is not your organization's default","line":"Claude Code has a new message saying auto mode isn't your organization's default and that Shift+Tab switches to it","released_at":"2026-09-29 17:32:09","reason":"gate cited by this entry"},{"version":"2.1.285","anchor":"managed-gateway-records-policy-denied-once-and-exposes-compu","heading":"Chrome extension helper now reports your computer's name","line":"The helper that connects Claude Code to Chrome now includes your computer's name in its status reply","released_at":"2026-09-29 17:32:09","reason":"gate cited by this entry"},{"version":"2.1.268","anchor":"remote-session-org-policy-denials-now-emit-telemetry","heading":"Remote-session org-policy denials now emit telemetry","line":"Blocked remote-session actions from org policy now emit a tengu_org_policy_denied telemetry event","released_at":"2026-09-10 18:41:11","reason":"gate cited by this entry, found in this entry's text"}],"entries_total":10,"docs":[],"docs_total":0,"gates":[{"version":"2.1.321","state":"unknown","account":null,"baseline":null,"code_default":null},{"version":"2.1.296","state":"unknown","account":null,"baseline":null,"code_default":null},{"version":"2.1.285","state":"unknown","account":null,"baseline":null,"code_default":null}],"related":[{"name":"tengu_org_config_gate_shadow","slug":"tengu-org-config-gate-shadow","description":"Claude Code now reports why fetching organization settings succeeded or failed, and logs what an organization settings check would decide"},{"name":"tengu_org_config_required","slug":"tengu-org-config-required","description":null},{"name":"tengu_org_memory_connected_mode","slug":"tengu-org-memory-connected-mode","description":"Claude records whether connected org memory is in use when you haven't listed stores yourself."},{"name":"tengu_org_memory_decision","slug":"tengu-org-memory-decision","description":"Org memory remembers who enabled it, and a different account trying to enable it is rejected."},{"name":"tengu_org_memory_decision_reopened","slug":"tengu-org-memory-decision-reopened","description":"Shared org memory now remembers who settled a decision and lets a settled decision be reopened."},{"name":"tengu_org_memory_first_write_into_write_home","slug":"tengu-org-memory-first-write-into-write-home","description":"Team memory sync can now skip an individual refused file without breaking the whole sync, and reports how many files were refused"},{"name":"tengu_org_memory_legacy_pick_nudged","slug":"tengu-org-memory-legacy-pick-nudged","description":"The memory store picker nudges you to pick a specific project instead of leaving the legacy default."},{"name":"tengu_org_memory_project_selected","slug":"tengu-org-memory-project-selected","description":"The org memory project picker now says whether your switch applies now or next session."},{"name":"tengu_org_memory_project_switch","slug":"tengu-org-memory-project-switch","description":"Switching shared project memory now reports exactly what happened and marks old results stale."},{"name":"tengu_org_memory_root_mount_derived","slug":"tengu-org-memory-root-mount-derived","description":"Org memory setup renames aside anything squatting its mount name rather than colliding."}],"url":"https:\/\/changelogs.core-directive.com\/reference\/flag\/tengu-org-policy-denied","family_url":"https:\/\/changelogs.core-directive.com\/reference\/flag.json"}