Relayed SendMessage from peer sessions no longer carries user authority
What this changes for operators
- 2.1.166: messages relayed via SendMessage from other Claude sessions no longer carry user authority; receivers refuse relayed permission requests and auto mode blocks them. Closes a confused-deputy path in multi-session orchestration.
Primary sources
Signal metadata
Source findings
- 2026-06-06-claude-code-sendmessage-authority-hardening 2026-06-06-claude-code-sendmessage-authority-hardening
Run: 2026-06-16-weekly-digest-2026-06-04_2026-06-16-frontier-v0
Schema: bitter.frontier_signals.v0 / ID: 2026-06-06-claude-code-sendmessage-authority-hardening
Research evidence and publication history are open in the repository.