You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
0Signal: worth watching, 1 to 5
Remote ControlArea: what it touches
In DevelopmentKind: in v2.1.225,
In DevelopmentSection of the release
What
Remote credential fetch retries once through a new device-attestation path, and an untrusted_device result without the relevant capability now returns a terminal rejection instead of a bare null.
Details
The rejection carries reason: "request_rejected" with status 403 and is marked terminal, so callers stop retrying.
OAuth-rejected results are now passed through to the caller rather than swallowed.
The enabled state of the surrounding path could not be resolved from the build.