Unclear Whether these signature checks run, and in which mode by default, is not stated.
What
Managed settings and policy limits are rules an organization sets for Claude Code. Claude Code keeps a list of possible results from checking the signature on them, a signature being proof the rules came from the organization unaltered. That list has changed. It now includes:
bad_signaturerollbackorg_pin_mismatchstale
The checking has two modes, enforced and shadow.
Why
This points to signature checks on organization settings, with a shadow mode alongside an enforced one.
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubt
Whether these signature checks run, and in which mode by default, is not stated.