Under the hood
Remote sessions under a new managed policy now have sideload-related tools restricted
What
When Claude Code is running as a remote session (CLAUDE_CODE_REMOTE is set) under a newly checked condition, its tool selection now applies the same ru restriction set already used for bridge-carrier-child and other remote session types. This restricts tools related to sideloading.
Why
This extends an existing tool-restriction policy to cover another category of remote session, keeping sideload-related tools locked down consistently across remote session types.