You'll notice
push.negotiate is now a trusted git config key and is set automatically alongside the gpgsign settings.
push.negotiate is now included in the set of git config keys Claude Code is allowed to read and trust. It's also one of the values Claude now sets automatically, alongside commit.gpgsign and tag.gpgsign, when configuring git for signed commits.
Names in the bundlepush.negotiatecommit.gpgsigntag.gpgsign
Documented inclaude-code/self-hosted-environments-deploy