{"version":"2.1.314","anchor":"peer-send-events-signed-with-a-device-attestation-elevated","canonical_anchor":"peer-send-events-signed-with-a-device-attestation-elevated","heading":"Peer messages can now be signed with a device attestation in elevated sessions","tier":"internal","area":"Sessions","scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.314\/e\/peer-send-events-signed-with-a-device-attestation-elevated","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.314","markdown":"### Peer messages can now be signed with a device attestation in elevated sessions\n\nIn elevated-security sessions on a trusted device, Claude Code now signs peer messages it posts, and sends them unsigned otherwise\n\n**What**\n\nThe newer path for sending session events can now sign peer messages, which are messages passed between connected sessions. Each event can carry a `device_attestation` field, proof that it came from a trusted device. Claude Code signs a message only when all of these hold:\n\n- a trusted-device token exists\n\n- the `tengu_ccr_v2_send_events_cli` switch is on, which it is unless switched off remotely\n\n- `CLAUDE_CODE_REMOTE` is not set\n\n- the session's `security_tier` is \"elevated\"\n\nOtherwise the message is sent unsigned. Signing problems are reported as telemetry (usage data sent back to Anthropic) under `peer_send_signer`. Examples include an account mismatch, no account, or a device bound elsewhere.\n\nIn readings taken before this release, that switch was on for this site's account and for an anonymous account.\n\n**Why**\n\nThis adds protection against faked peer messages in Remote Control. Sessions that are not elevated are unaffected.\n\n- Flag `tengu_ccr_v2_send_events_cli`: On for this account, and not off by default (read for one account on one subscription tier against v2.1.314; this account: on, anonymous baseline: on, compiled default: on) These values were read against a different version of Claude Code, so treat them as the nearest reading available instead of one taken on this release.\n- Area: Sessions\n- Tier: Under the hood\n- Useful: 3\/5\n- Signal: 4\/5\n- Scope: individual\n- Heads-up: no"}