You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
2Signal: worth watching, 1 to 5
Managed SettingsArea: what it touches
ImprovementsKind: in v2.1.232,
ImprovementsSection of the release
What
Managed configuration now rejects blank entries in a policy's group list, an empty group list, and an empty or whitespace-only email domain, as well as domains containing @, whitespace or commas. Email domains are trimmed, stripped of a leading @ and lowercased before being matched, so casing and stray characters no longer silently break a policy. The admin group list rejects empty strings for the same reason.
Details
The desktop block is no longer checked against a fixed schema and now accepts any record.
Evidence
match.email_domain is blank after normalization
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
How sure we are
One source agreesOne thing we can check says the same as this entry.
Anthropic's release notes agreeGateway: empty managed.policies[].match.groups/admin.admin_groups entries and malformed email_domain values (empty, or containing @…
