You'll noticeTier: how much it should matter to you
3Useful: my rating, 1 to 5
3Signal: worth watching, 1 to 5
PermissionsArea: what it touches
New FeaturesKind: in v2.1.251,
New FeaturesSection of the release
What
When Claude reads a team permission request from a teammate's inbox, it now checks that the agent named in the request is the one who actually sent the message. Mismatches are dropped with a logged warning instead of being acted on. The check is unconditional.
Evidence
does not match sender
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
