[BUG] Windows Smart App Control blocks audio-capture.node (Code Integrity - Enterprise signing level)

Preflight Checklist

• [x] I have searched existing issues and this hasn't been reported yet
• [x] This is a single bug report (please file separate reports for different bugs)
• [x] I am using the latest version of Claude Code

What's Wrong?

The VS Code extension's audio-capture.node native module is blocked by Windows Smart App Control / Code Integrity, because the binary does not meet the Enterprise signing level requirements. This breaks the voice input feature.

Windows Event Viewer (CodeIntegrity - Operational) shows:

Code Integrity determined that a process (Code.exe) attempted to load .vscode\extensions\anthropic.claude-code-2.1.250-win32-x64\resources\audio-capture\x64-win32\audio-capture.node that did not meet the Enterprise signing level requirements or violated code integrity policy (Policy ID:{0283ac0f-fff1-49ae-ada1-8a933130cad6}).

No entry appears in Windows Security's "Protection history" — this only shows up in Event Viewer under Applications and Services Logs > Microsoft > Windows > CodeIntegrity > Operational (Event ID 3077).

What Should Happen?

Expected: audio-capture.node loads normally and voice input works.
Actual: the module is blocked by Windows Code Integrity / Smart App Control, and voice recording fails silently from the user's perspective (only visible via Event Viewer).

Likely cause: the audio-capture.node binary bundled with the extension (resources/audio-capture/x64-win32/audio-capture.node) is not signed with a certificate that satisfies Smart App Control / Enterprise signing level requirements.

Suggested fix: sign audio-capture.node (and other bundled native .node binaries) with a trusted code-signing certificate from a CA in the Microsoft Trusted Root Program, or via Microsoft Trusted Signing.

Error Messages/Logs

Code Integrity determined that a process (Code.exe) attempted to load .vscode\extensions\anthropic.claude-code-2.1.250-win32-x64\resources\audio-capture\x64-win32\audio-capture.node that did not meet the Enterprise signing level requirements or violated code integrity policy (Policy ID:{0283ac0f-fff1-49ae-ada1-8a933130cad6}).

Source: Event Viewer > Applications and Services Logs > Microsoft > Windows > CodeIntegrity > Operational, Event ID 3077.

Steps to Reproduce

1. Use a Windows 11 machine with Smart App Control enabled (enforcement mode).
2. Install the Claude Code VS Code extension (anthropic.claude-code).
3. Open VS Code and trigger the voice input feature (which loads resources/audio-capture/x64-win32/audio-capture.node).
4. Windows Security shows a "Smart App Control blocked part of this app" style notification. Windows Security's Protection history shows nothing related.
5. Open Event Viewer > Applications and Services Logs > Microsoft > Windows > CodeIntegrity > Operational and find an Event ID 3077 entry showing audio-capture.node was blocked for not meeting Enterprise signing level requirements.

Note: the block appears to happen because audio-capture.node is not signed with a certificate satisfying Smart App Control's Enterprise signing level requirement.

Claude Model

None

Is this a regression?

Yes, this worked in a previous version

Last Working Version

_No response_

Claude Code Version

2.1.251

Platform

Anthropic API

Operating System

Windows

Terminal/Shell

VS Code integrated terminal

Additional Information

_No response_