{"name":"tengu_sessions_elevated_auth_disable_proactive_enrollment","slug":"tengu-sessions-elevated-auth-disable-proactive-enrollment","family":"flag","title":"Feature flags","noun":"feature flag","description":"Untrusted-device failures still recover automatically, and expired trusted-device sessions now tell you to run \/login.","description_source":"entry","described_by":{"version":"2.1.225","anchor":"untrusted-device-recovery-can-be-turned-off-by-a-flag-unarch"},"presence":{"first_seen":"2.1.138","removed_in":null,"in_current_build":true,"newest_mined":"2.1.309","builds":110,"mined_builds":150,"first_cited":{"version":"2.1.225","released_at":"2026-08-07 23:08:56","spans":1}},"aliases":[],"entries":[{"version":"2.1.225","anchor":"untrusted-device-recovery-can-be-turned-off-by-a-flag-unarch","heading":"Untrusted-device recovery can be turned off by a flag; unarchive gets its own 403 handling","line":"Untrusted-device failures still recover automatically, and expired trusted-device sessions now tell you to run \/login.","released_at":"2026-08-07 23:08:56","reason":"gate cited by this entry, found in this entry's text"}],"entries_total":1,"docs":[],"docs_total":0,"gates":[],"related":[{"name":"tengu_sessions_elevated_auth_enforcement","slug":"tengu-sessions-elevated-auth-enforcement","description":"Cloud sessions get told outright they cannot message peers that require a trusted device."}],"url":"https:\/\/changelogs.core-directive.com\/reference\/flag\/tengu-sessions-elevated-auth-disable-proactive-enrollment","family_url":"https:\/\/changelogs.core-directive.com\/reference\/flag.json"}