{"version":"2.1.282","anchor":"managed-settings-made-only-of-fail-closed-substitutes-no-lon","canonical_anchor":"managed-settings-made-only-of-fail-closed-substitutes-no-lon","heading":"Managed settings: clearer handling of values replaced by fail-closed substitutes","tier":"notice","area":"Managed Settings","url":"https:\/\/changelogs.core-directive.com\/v\/2.1.282\/e\/managed-settings-made-only-of-fail-closed-substitutes-no-lon","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.282","markdown":"### Managed settings: clearer handling of values replaced by fail-closed substitutes\n\nManaged settings made only of fail-closed substitutes no longer count as authored policy, and remote managed settings now keep more raw values\n\n**Unclear.** It is unclear what else in Claude Code depends on whether a source is marked as written policy.\n\n**What**\n\nManaged settings are settings an organisation's administrator enforces on Claude Code. When a managed value is invalid, Claude Code can fail closed: it swaps in the most restrictive value instead of ignoring the setting. This release tracks those substitutions more closely:\n\n- Settings warnings now carry `substituted` and `onlySubstitutes` flags that mark values replaced this way.\n\n- A managed settings source whose only content is such substituted values is no longer marked as authored policy. It gets a status-only message saying the source \"holds nothing that could be applied as written and is this source's only policy content\", and that its fail-closed reading binds until the source is fixed.\n\n- When remote managed settings are salvaged after validation errors, the raw value from the payload is now kept for `cleanupPeriodDays` and `desktopSessionCleanupPeriodDays`, and for any setting whose errors are all marked `onlySubstitutes`. Before, only those two cleanup keys were restored.\n\n**Why**\n\nAdministrators get a clearer signal when a broken managed-settings file is being enforced only through restrictive fallbacks. Some settings pushed by an organisation may also now apply where they were previously dropped as invalid.\n\n- Area: Managed Settings\n- Tier: You'll notice\n- Useful: 1\/5\n- Signal: 1\/5"}