A new remoteTools.allowUnattendedServing setting controls unattended remote tool serving and falls back to false when invalid.
A new managed/user settings key remoteTools.allowUnattendedServing (settable in ~/.claude/settings.json at the org or user level) controls whether unattended remote-tool serving is allowed. When set to false, a cloud session in auto mode cannot run commands on the local computer without per-command approval; project/local/--settings values are ignored for this key. Invalid values fall back to allowUnattendedServing: !1 (false, i.e. no unattended serving), and the key is registered as non-restrictive in the settings policy list. The UI surfaces a specific explanation depending on whether it was turned off by the organization's settings ("Turned off by your organization's settings (remoteTools.allowUnattendedServing)") or the user's own settings.