Headless cloud client now restricts a repository-trust permission request to a single-hash format before forwarding it
In the headless cloud client, a permission request tied to repository trust is now only passed on to the host if it names exactly one input (a content digest hash) plus a short description. If the request doesn't match that exact shape, it is blocked and a warning is logged instead of being forwarded.
This is a tightening of what counts as a valid repository-trust request, closing off requests that try to attach anything other than the expected digest before they reach the host.
tengu_violin_bridgepin Off in both readingsThe flag server returned off for the account this site reads and for the anonymous baseline. A reading of off cannot rule out a rollout these two readings sit outside of.
This account: off · anonymous baseline: off · compiled default in v2.1.277: off
These values were read against a different version of Claude Code, so treat them as the nearest reading available instead of one taken on this release.
Read once, for one account on one subscription tier, against v2.1.277. It isn't a statement about your account. What a flag value here can and cannot tell you
A reading is one sample. Claude Code evaluates its flags remotely, so no client sees the targeting rule behind a value and this says nothing about your account.
The gate `tengu_violin_bridgepin` controlling this was read as off for both this site's account and the anonymous baseline, with no reading…
New in this build: tengu_violin_bridgepin