Claude Code 2.1.232 changes more than the version number. Forked subagents now inherit the full conversation and prompt cache by default, interactive non-teammate spawns move to the background, and Windows permission bypasses were closed.
That means a successful launch is not enough. Context inheritance, session routing, permissions, repository trust, MCP probes, and Remote Control recovery are separate operating boundaries.
Spawn one child agent with a harmless task. Confirm that it sees the intended parent context and does not inherit unrelated instructions.
Start one interactive non-teammate child. Check that it moves to the background and that its final status returns to the expected parent session.
Resume or message a session by name. Confirm the message reaches the intended session rather than another similarly named run.
Use a disposable fixture. Perform one harmless write inside the approved path, then attempt one write that should be denied. Both outcomes matter. Open a nested repository and verify that the trust boundary is explicit. Do not assume the parent repository's approval automatically covers every nested path.
Trigger one bounded MCP probe failure and one Remote Control resume. Confirm that tools, session state, and recovery messages remain coherent.
Use one symptom, one fixture, and one changed layer. A broad end-to-end run can pass while a permission or routing regression remains hidden. The full source-linked checklist, including the official release evidence and rollback boundaries, is available here:
https://tgwise.com/intelligence/claude-code-2-1-232-forked-subagents-windows-permission-fixes/