{"version":"2.1.247","anchor":"session-channel-messages-from-senders-this-session-cannot-ve","canonical_anchor":"session-channel-messages-from-senders-this-session-cannot-ve","heading":"Session-channel messages from senders this session cannot verify are refused, dropped or trimmed","tier":"internal","area":"Remote Tools","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.247\/e\/session-channel-messages-from-senders-this-session-cannot-ve","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.247","markdown":"### Session-channel messages from senders this session cannot verify are refused, dropped or trimmed\n\nSession-channel messages from unverified senders are dropped, and untrusted settings changes get their plugin key stripped.\n\n**What**\n\nCertain sensitive messages arriving over the session channel are judged against a device-attestation floor, and a message with no stamp is treated as refused. Below-floor requests are dropped without an answer, below-floor replies are dropped so the original request keeps waiting, and a below-floor settings change has only its forwarded-plugin key removed while the rest applies.\n\n**Details**\n\n- Guarded message kinds are the tool announcement, hook registration, hook template upload and settings application.\n- A below-floor refusal of a call is rebuilt with the target name `unverified-sender` and a plain-language reason, so Claude is told the result is unconfirmed rather than being told the call failed.\n- Whether each family is guarded is decided at runtime by the matching admission checks (`CLAUDE_CODE_DISABLE_HOOK_FORWARDING`, `CLAUDE_CODE_DISABLE_PLUGIN_FORWARDING`, session channel off, hermetic mode); with no judgement available all three are guarded.\n\n**Evidence**\n\n`reported refused \\u2014 ${e} \\u2014 by a sender this session could not verify; whether anything ran there is not confirmed. Check its effect before re-running it.`\n\n- Area: Remote Tools\n- Tier: Under the hood\n- Useful: 2\/5\n- Signal: 4\/5"}