You'll noticeTier: how much it should matter to you
3Useful: my rating, 1 to 5
3Signal: worth watching, 1 to 5
Cloud SessionsArea: what it touches
ImprovementsKind: in v2.1.242,
ImprovementsSection of the release
What
When uploading your repository to a cloud session, Claude Code now checks once whether this is a device session and, if so, builds the upload in hardened mode. In that mode a misplaced or tampered git directory fails the upload outright instead of being downgraded to a softer result, and is treated the same way as uncommitted credentials.
Details
The hardened flag defaults to the device-session check result, and defaults off on Windows.
Evidence
git_dir_tampered
Strings lifted out of the shipped bundle, so the claim above can be checked against them.