Under the hoodTier: how much it should matter to you
2Useful: my rating, 1 to 5
2Signal: worth watching, 1 to 5
Remote ControlArea: what it touches
Internal ChangesKind: in v2.1.275,
Internal ChangesSection of the release
Unclear What attestation mechanism produces these values or how they are validated is not stated in the finding.
What
When a remote session forwards a tool or permission request to a callback (the code that decides how to handle it), it now also includes attestationStatus and attestationRaw fields alongside the existing timing information.
Why
This gives remote-control handlers more information to verify the authenticity of an incoming request before acting on it.
How sure we are
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubtWhat attestation mechanism produces these values or how they are validated is not stated in the finding.
