Restricted sessions fall back to local runs instead of cloud agents or cloud sessions.
What's wrong with this entry?
Asking a Task to run with cloud isolation now falls back to a local or worktree run when the session is restricted, in addition to the existing fallbacks for no claude.ai login and the feature being off, and the log line names which reason applied. Creating a cloud session likewise bails out early with a restricted-session reason.
- Cloud session creation already refused under a managed policy that disallows remote sessions, and requires the first-party Anthropic API provider; the restricted check joins those.
(no claude.ai login or feature gate off), Cloud sessions are only available on the first-party Anthropic API provider.
Strings lifted out of the shipped bundle, so the claim above can be checked against them.