Saved organisation policy limits are used only if their signed copy checks out

Policy limits are restrictions an organisation places on Claude Code, and Claude Code keeps a saved copy of them on disk. Until now a signed copy of that saved data was only checked in the background. The check did not decide anything, and the saved copy was used whenever its stamp matched.

Now the saved copy is trusted only if its signed copy verifies against the organisation the administrator pinned. If it does not verify, Claude Code starts as if nothing were saved. Compliance restrictions and explicit denials still apply in that case. Claude Code also records whether the stored copy was trusted, and records when the signed identity behind the cache changes.