What probably matters to youSection of the release
Unclear Nothing has been read yet about the tengu_on_branch_default_guard_observe gate for this site's account, so what "observe" mode does in practice versus "enforce" isn't confirmed here.
What
A guard around --on-branch cloud checkouts can now be forced into "enforce" mode using the environment variable CCR_ON_BRANCH_DEFAULT_GUARD. If that environment variable isn't set, Claude Code falls back to checking a remote configuration value, tengu_on_branch_default_guard_observe, to decide the guard's behavior.
Why
This gives operators a direct, local way to force strict enforcement of the on-branch checkout guard for cloud sessions, without waiting on remote configuration.
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubtNothing has been read yet about the `tengu_on_branch_default_guard_observe` gate for this site's account, so what "observe" mode does in…
