You'll noticeTier: how much it should matter to you
1Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
ElsewhereArea: what it touches
ImprovementsKind: in v2.1.285,
ImprovementsSection of the release
What
claude ssh runs Claude Code on another machine over a secure connection (a tunnel). Before a session starts, Claude Code loads your organization's policy. That loading has a new failure case for when the machine running claude ssh changes its credentials partway through:
stale_tunnel_credential is a new reason the policy load can fail. It comes with its own message: "the machine running claude ssh changed credentials while your organization's policy was loading".
This outcome is now grouped with timeout and parse_failed as a "live" outcome, rather than being treated separately.
A new function marks a session's verdict as disowned (sessionVerdictDisowned) and announces that the verdict changed, the first time this happens.
Why
If a credential change interrupts policy loading in an ssh session, you now get a message that says what happened instead of a less specific failure.
