What
Remote Control no longer raises a security notice when a reply arrives for a prompt that was already answered; the duplicate is dropped quietly. Unsigned remote activity is now described as ignored rather than "will not execute it", and in CLAUDE_CODE_REMOTE sessions an HTTP 401, or a 403 from an untrusted device, produces a dedicated authentication error instead of a generic failure.
Details
- The dropped duplicate is still recorded in telemetry, with a
_resolved_duplicatesuffix on the event name, so the drop is visible without alarming the user. - Posting to a peer now logs the rejected HTTP status.
- Reasons for a conflicting response are parsed by a single normalizer that also reads the
error.typefield, so more server responses classify correctly.
Evidence
is a duplicate answer to an already-resolved prompt; notice suppressed
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
Names in the bundleCLAUDE_CODE_REMOTE