{"version":"2.1.257","anchor":"new-auth-taint-state-blocked-unsettled-replacing-unconditi","canonical_anchor":"new-auth-taint-state-blocked-unsettled-replacing-unconditi","heading":"New auth taint state 'blocked_unsettled' replacing unconditional pass","tier":"internal","area":"Auth","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.257\/e\/new-auth-taint-state-blocked-unsettled-replacing-unconditi","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.257","markdown":"### New auth taint state 'blocked_unsettled' replacing unconditional pass\n\nAuth-taint classification can now land on a blocked_unsettled state instead of always passing clean cases through.\n\nThe auth-taint classification function now checks a new `l4t()` gate before allowing the `allowed_taints_clean` or `allowed_untaintable` states. If the gate returns false, the state becomes `blocked_unsettled` instead of being allowed through unconditionally.\n\n- Area: Auth\n- Names: `blocked_unsettled`\n- Tier: Under the hood\n- Useful: 3\/5\n- Signal: 4\/5"}