{"version":"2.1.277","anchor":"new-repository-trust-confirmation-flow-for-cloudremote-se","canonical_anchor":"new-repository-trust-confirmation-flow-for-cloudremote-se","heading":"New 'repository trust' confirmation flow for cloud sessions","tier":"soon","area":"Cloud Sessions","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.277\/e\/new-repository-trust-confirmation-flow-for-cloudremote-se","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.277","markdown":"### New 'repository trust' confirmation flow for cloud sessions\n\nCloud sessions can now ask you to confirm 'repository trust,' with device-binding checks, a feature flag, and session-level trust reporting\n\n**What**\n\n- A new \"repository trust\" confirmation question type was added to the remote\/cloud-session permission pipeline. Answering yes marks everything attached to that cloud session as trusted.\n\n- The client refuses to show the confirmation unless the input matches exactly the digest served by the server. If the terminal isn't the device the cloud session is bound to, it adds a warning that the answer can't prove which device it came from, telling you to answer from claude.ai web, desktop, or mobile instead. If the terminal can't render the question at all, it leaves it unanswered for other devices along with an explanatory note.\n\n- Tool-result rendering gained a matching \"refusal\" display: for repository-trust folder-wait errors, a localized message keyed `repository_trust.folder_waits.<reason>` is now shown instead of the plain error view, and detached\/backgrounded tool call results are rendered with a dedicated rows\/table-style component.\n\n- A new `nameRepositoryTrustAnswers` capability flag, off by default, was added, gated behind a first-party check and a growthbook flag.\n\n- The cloud session view now reports a `repositoryTrust` fingerprint and a directory-sync retention cutoff for directory-synced sessions.\n\n**Why**\n\nThis gives Claude Code a way to ask for and record explicit trust confirmation before treating everything attached to a cloud session as trusted, with safeguards so the confirmation can only meaningfully be answered from the device the session is actually bound to.\n\n- Flag `tengu_violin_bridgepin`: Off in both readings (read for one account on one subscription tier against v2.1.277; this account: off, anonymous baseline: off, compiled default: off) These values were read against a different version of Claude Code, so treat them as the nearest reading available instead of one taken on this release.\n- Area: Cloud Sessions\n- Tier: Nothing to try yet\n- Useful: 4\/5\n- Signal: 4\/5\n- Present in the build but not switched on"}