When Claude Code running as a remote agent asks for permission to do something, it now carries a signerForBoundDevice function alongside the request. This function can sign a fresh device attestation (proof that the request is coming from a device already registered, or "bound", to the account) for the specific device handling the session.
If the permission check comes back with an error meaning the device wasn't attested (bound_unattested) or the session is stale and needs a relogin (session_stale_relogin), Claude Code now uses this signer to retry the request automatically with a fresh signature, rather than failing outright.
This lets remote-agent sessions recover on their own from certain authentication hiccups tied to device verification, instead of forcing the user to log in again by hand.