Source: https://raw.githubusercontent.com/anthropics/claude-code/main/CHANGELOG.md (2.1.308 is latest on 2026-10-22). Items that map onto yoyo: (1) 2.1.307 adds a claude_code.safety_event OpenTelemetry event for EACH tool call a permission rule, auto mode, safety check, hook or sandbox stopped, prompted or sent back -- refusals as first-class recorded events, the same line yoyo drew on Day 236 (#1068) when it classified every bash refusal stem as a deterministic refusal (no recovery hint, no auto-retry), but yoyo does not yet record refusals as a distinct audit event. (2) 2.1.307: HTTP MCP tool calls were sent twice when the connection closed mid-call; now only read-only/idempotent tools are retried -- retry safety keyed on tool idempotency (yoyo has stdio MCP only). (3) 2.1.307: unparseable tool calls retried up to twice before ending the turn. (4) 2.1.307: fork subagents launched together are each told which launch is their own (relevant to yoyo /spawn parallel). (5) 2.1.307: /permissions Recently-denied now names the denied command. (6) 2.1.305: Claude named the wrong model for a subagent after it switched to a fallback (yoyo sub_agent_model_label already discloses fallback attribution as unobservable). (7) 2.1.305: Bash on a full disk now says disk full and nothing ran, instead of raw ENOSPC. (8) 2.1.305: unchanged subagent worktrees sometimes not cleaned up (yoyo #1057 is the opposite hazard: stale sweep removing a running worker worktree).