{"version":"2.1.268","anchor":"remote-control-bridge-distinguishes-org-policy-denial-and-l","canonical_anchor":"remote-session-org-policy-denials-now-emit-telemetry","heading":"Remote\/cloud session denials from org policy now get logged consistently","tier":"internal","area":"Remote Control","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.268\/e\/remote-control-bridge-distinguishes-org-policy-denial-and-l","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.268","markdown":"### Remote\/cloud session denials from org policy now get logged consistently\n\nWhen org policy blocks a remote or cloud session action, Claude Code now logs a structured org-policy-denied event before refusing\n\n**What**\n\n- When the `allow_remote_sessions` org policy blocks a cloud\/remote-session action - in the `\/ultrareview` command and in `--print --teleport` resume - Claude Code now fires a `tengu_org_policy_denied` telemetry event carrying the policy key, the kind of denial, and a `surface` tag (`slash_command` for ultrareview, `cloud_session` for teleport).\n\n- The remote-control bridge's disabled-reason check (renamed from `getBridgeDisabledReason` to `getBridgeDisabledDiagnosis`) now returns a structured result with an `orgPolicyDenied` flag; when set, the CLI logs the denial and flushes analytics before exiting with the error.\n\n- A non-interactive\/stream 'ready' check that refuses because the feature is unavailable now also logs this same org-policy denial before returning the refusal.\n\n**Why**\n\nThis gives Claude Code (and its admins) visibility into how often and where organization policy is blocking remote or cloud session features, rather than the refusal happening silently.\n\n- Area: Remote Control\n- Names: `--remote`\n- Tier: Under the hood\n- Useful: 2\/5\n- Signal: 2\/5"}