On device sessions, uploading a repo with a tampered git directory now fails outright rather than being downgraded.
What's wrong with this entry?
When uploading your repository to a cloud session, Claude Code now checks once whether this is a device session and, if so, builds the upload in hardened mode. In that mode a misplaced or tampered git directory fails the upload outright instead of being downgraded to a softer result, and is treated the same way as uncommitted credentials.
- The hardened flag defaults to the device-session check result, and defaults off on Windows.
git_dir_tampered
Strings lifted out of the shipped bundle, so the claim above can be checked against them.