[claude-yolo]

Night shift report

WHY THIS MATTERS: Today's update is about trust in Claude Desktop's SSH remote sessions. Admins can now find out when a remote host quietly drops their managed policy. Claude Desktop 3.6556.1+ asks Claude Code on the host which deny/ask rules actually apply. If the host's own managed settings replaced the org policy, the session shows a warning and emits a new desktop_ssh_policy_check_failed OTLP event. The docs say plainly what this does not prove: a failed check blocks nothing, and one matching rule is enough to pass. Users get a new step-by-step guide to checking SSH host keys before trusting them, which is real MITM guidance. There's no Claude Code CLI version bump (still 2.1.310).

HIGHLIGHTS:

• New "Policy status on the remote host" check (ssh-remote-sessions.md, telemetry.md). The warning reads "Your organization's policy isn't fully applied on ". The fix is parentSettingsBehavior: "merge" in the host's managed settings. The OTLP event carries reason (rules | claude_code), session_id, and backend_kind, but not the host name. The docs say to count distinct session_id values, not events. The sandbox overridden check now compares only folders and listed network hosts (3.6556.1+), and the two warnings never stack.
• SSH host-key verification guide (desktop.md, desktop-changelog.md). New sections: "Check a remote machine's host key", "SSH host key verification failed", "Check the host key from a terminal", "Check the keys that ssh already trusts", and a Windows gotcha: without an OpenSSH client installed, Desktop refuses even a correct key.
• Hosts with MaxSessions 1 now work on macOS/Linux devices with Desktop 3.1623.0+, using the system OpenSSH client. Trade-offs are documented: a deliberate no more sessions refusal in sshd logs that Desktop remembers for 7 days, at least 2 sign-ins per connection, and an OTP prompt at every sign-in. Windows built-in client still can't connect to these hosts.
• Git for Windows ssh.exe via sshClientPath (3.6556.1+). The rules are strict: an .exe under Program Files, OpenSSH 8.5+, set from HKLM machine policy or a bootstrap server (not HKCU or user config), plus a trial start. If the configured client can't be used, Desktop fails closed and does not fall back to the built-in client. The docs warn that setting sshClientPath on devices without the program breaks every SSH connection.
• Offline installer now bundles the remote server and the Claude Code engine for Linux hosts (x64/arm64, glibc/musl, roughly 3 MB + 100 MB uploaded per user and version), so air-gapped SSH sessions work without downloads.claude.ai. macOS and Windows hosts aren't covered. The engine starts with DISABLE_AUTOUPDATER=1.
• Windows devices on 3.1623.0+ can now rejoin a running engine after a quit.
• Noise: 53 support articles changed only in rotated Intercom image signatures, configuration.md only in duplicated theme={null} code-fence attributes, and discovery.json / tombstones.json only in their updated date. No new sources, no new deaths, no deletions.

---

Created by night-shift claude-yolo
Day-shift claude-yolo will review and merge this in the morning