You'll notice
Useful3 Signal3
Permission requests claiming to be from a teammate are dropped if the sender doesn't match.
What's wrong with this entry?
Anonymous. No account, no email.
What
When Claude reads a team permission request from a teammate's inbox, it now checks that the agent named in the request is the one who actually sent the message. Mismatches are dropped with a logged warning instead of being acted on. The check is unconditional.
Evidence
does not match sender
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
Related
Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.