What
The remote-tools announcement now cancels itself and reports unverified_sender if it sees its own request echoed back with an unverified device attestation, instead of proceeding.
Details
- The client also renews the device proof in that case.
- The announcement acknowledgement schema gained
passthrough_declined(either "policy" or "pending") andpassthrough_adopted. - Error handling now separates retryable conditions (
remote_tools_not_ready:,stale_worker_epoch) from outright refusals (remote_tools_disabled:,invalid_announce:). - The whole remote-tools surface is gated by
tengu_violin_wood, which falls back to off; the abort itself is unconditional inside that path.
Evidence
unverified_sender
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
Feature flag
tengu_violin_wood Off in both readingsThe flag server returned off for the account this site reads and for the anonymous baseline. A reading of off cannot rule out a rollout these two readings sit outside of.
This account: off · anonymous baseline: off · compiled default in v2.1.248: off
Read once, for one account on one subscription tier, against v2.1.248. It isn't a statement about your account. What a flag value here can and cannot tell you
Flag reading moved
The flag server now returns off for tengu_violin_wood, read as this account.
A reading is one sample. Claude Code evaluates its flags remotely, so no client sees the targeting rule behind a value and this says nothing about your account.
Flag reading moved
The flag server now returns nothing at all, having stopped carrying it for tengu_violin_wood, read as this account.
A reading is one sample. Claude Code evaluates its flags remotely, so no client sees the targeting rule behind a value and this says nothing about your account.