{"version":"2.1.271","anchor":"compliancefederation-enforcement-helper-functions-added","canonical_anchor":"compliancefederation-enforcement-helper-functions-added","heading":"New compliance\/federation restriction checks with pre-remote-config hinting","tier":"use","area":"Enterprise","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.271\/e\/compliancefederation-enforcement-helper-functions-added","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.271","markdown":"### New compliance\/federation restriction checks with pre-remote-config hinting\n\nClaude Code now checks compliance taints and federation-enforced restrictions before remote config is even loaded\n\n**What**\n\nA new compliance\/federation enforcement mechanism was added:\n\n- New helper functions implement checks around \"compliance_taints\" and restriction keys prefixed `enforce_`\/`require_`, plus a new `ANTHROPIC_FEDERATION_RULE_ID` environment variable used to build a federation cache key.\n\n- The feature-gate check that runs when a cached permission value is missing was reworked to first consult a new set of session-local \"hinted\" denials and compliance taints before remote config has even loaded, gated behind an internal check that requires first-party Anthropic authentication.\n\n**Why**\n\nThis lets organization-enforced compliance restrictions apply immediately, even before the remote configuration that normally carries them has finished loading, closing a gap where early actions could bypass a restriction.\n\n- Area: Enterprise\n- Names: `ANTHROPIC_FEDERATION_RULE_ID`, `ANTHROPIC_ORGANIZATION_ID`\n- Tier: Use it now\n- Useful: 3\/5\n- Signal: 2\/5"}