{"version":"2.1.312","anchor":"signed-policysettings-token-verification-drops-rollback-che","canonical_anchor":"signed-policysettings-token-verification-drops-rollback-che","heading":"Signed policy documents are no longer checked for being older than the last one","tier":"internal","area":"Managed Settings","scope":"org","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.312\/e\/signed-policysettings-token-verification-drops-rollback-che","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.312","markdown":"### Signed policy documents are no longer checked for being older than the last one\n\nClaude Code no longer rejects a signed settings or policy document for being older than one it has already accepted\n\n**Unclear.** It is not clear whether old signed documents are now rejected somewhere else or not at all.\n\n**What**\n\nAn organization can send Claude Code settings and policies, called managed settings, as signed documents. The signature proves they came from a trusted source. Before, Claude Code also remembered the newest issue time it had accepted. It rejected any document issued earlier than that as a \"rollback\". That check has been removed from the code that verifies these documents.\n\nThe way Claude Code fetches policy limits was also reworked.\n\n**Why**\n\nThe rollback check stopped an older, still validly signed document from replacing a newer one. Without it in this code, an outdated set of managed settings or policies would not be rejected here for its age. Administrators who rely on newer policies always taking effect should keep this in mind.\n\n- Flag `tengu_rustling_orbit`: Off in both readings (read for one account on one subscription tier against v2.1.312; this account: off, anonymous baseline: off, compiled default: off) These values were read against a different version of Claude Code, so treat them as the nearest reading available instead of one taken on this release.\n- Area: Managed Settings\n- Tier: Under the hood\n- Useful: 2\/5\n- Signal: 3\/5\n- Scope: org\n- Heads-up: no"}