Nothing to try yetTier: how much it should matter to you
3Useful: my rating, 1 to 5
4Signal: worth watching, 1 to 5
Device PolicyArea: what it touches
In DevelopmentKind: in v2.1.318,
What probably matters to youSection of the release
What
Device attestation is a check that proves a device is the one it claims to be. The part of Claude Code that handles remote session clients gained a check that reports whether a device policy is being enforced. It counts as enforced only when the policy is set to enforce and every status it accepts is one Claude Code recognises.
Other changes in the same place:
A hook that can give a reason for not sending a call. It returns nothing for now, and sending a served call request now passes through it.
A counter once named for dropped answers now counts session refusals.
A one-time warning when the parts that write to the session are missing.
Why
This lays groundwork for refusing devices that cannot prove who they are in remote sessions. Nothing is refused through the new hook yet.