# Claude Code 2.1.316 Adds Shared Gateway Budgets and Tighter Access Checks

The latest Claude Code release gives self-hosted teams more control over shared spending and fixes gaps between configured permissions and actual requests.

By Paras Madan | 2026-11-01


Anthropic released Claude Code 2.1.316 on October 31 with shared monthly budgets for gateway groups, layered management policies and fixes to model-access and file-upload checks. For teams running coding agents through their own infrastructure, the useful change is greater control over what a shared credential can spend and access.

The [official release notes](https://github.com/anthropics/claude-code/releases/tag/v2.1.316) describe an operational update, with several changes that matter more to administrators than to someone using Claude Code alone.

## How gateway group budgets change spending

The new `pooled_budget` option creates one monthly budget shared by a group's members, alongside their individual limits. Administrators configure it through the spend-limits admin API.

That adds a control the existing group cap did not provide. The [gateway spend-limits documentation](https://code.claude.com/docs/en/claude-apps-gateway-spend-limits) describes ordinary group limits as defaults inherited by each developer. A group of ten people with the same individual allowance can collectively spend much more than that allowance.

**A shared budget adds a group-level spending check.** Individual limits remain useful for containing one unusually expensive workflow. The combination lets an administrator distinguish how much one person can use from how much the whole group can use.

There is a documentation gap: at publication, the spend-limits reference still describes the older per-seat behavior without a detailed pooled-budget example. The release confirms the new field, but operators should verify its request shape and overlapping-group behavior against their deployed version before changing production budgets.

## Which deployments this affects

The [Claude apps gateway](https://code.claude.com/docs/en/claude-apps-gateway) is Anthropic's self-hosted service for routing Claude Code through a company's model provider. It holds upstream credentials and uses corporate sign-in, with group-based access controls and telemetry. It is included in the Claude executable.

This gateway update is separate from the pooled budgets in Claude Enterprise's hosted administration interface. It does not establish that gateway users gain Enterprise smart reports or every feature available through a normal Claude subscription.

The gateway's spend accounting is also an estimate, intended to stop excessive usage. The provider's billing record remains the reference for actual charges. Its documented default during a spending-database failure is to allow requests through; administrators can instead choose to block them.

## Layered policies and access fixes

Version 2.1.316 adds `managed.policy_mode: layered`. Matching policies can now combine, with earlier policies taking precedence over later ones, instead of selecting only the first match. This can help a team apply a common baseline while adding department-specific rules, but it also makes policy order something to review carefully.

The release fixes gateway requests that did not check every named model against the access rules. A blocked model now produces a `400` response identifying the field. It also fixes restricted sessions uploading files outside their working directories when a Read permission covered those files.

These are specific fixes, not evidence that every agent action is now contained or that anyone exploited these paths. An administrator upgrading should test a denied model and an out-of-directory file alongside the successful workflow. A policy is much easier to trust when its refusal path has been checked too.

I’m Paras. I work at the intersection of AI, engineering and distribution.

I help technical teams turn complex AI launches and engineering updates into clear stories that developers and founders read and share.

[Book a 30-minute call](https://cal.com/paras-madan/30min)