Claude Shield

Claude Shield

While Anthropic's Claude Code is an exceptionally powerful terminal-based AI coding assistant, versions **2.1.91–2.1.196** contained hidden environment-fingerprinting and restriction checks. To protect developer privacy sovereignty and restore client connectivity over local proxy relays, Claude Shield provides a zero-Cargo-dependency, ultra-lightweight automated privacy protection utility and real-time sentinel daemon written in Rust.

虽然 Anthropic 的 Claude Code 是一款极其强大的终端 AI 编程助手，但在 **2.1.91–2.1.196** 安装包中存在针对开发者本地环境的隐密审计与限制检测机制。为了确保开发者的隐私主权并解决由于本地网络限制、代理中转站导致的应用阻断，Claude Shield 提供一个采用 Rust 编写的、无 Cargo 外部依赖的轻量级自动化隐私防护工具与实时后台守护进程。

**Note / 说明**: Anthropic removed the steganographic fingerprinting path in **2.1.197+**. On those builds `scan` correctly reports *No known mechanism detected*. Shield still patches older installs, enforces clean locales, audits proxy/base-url against the historical 147-domain list, and runs a pure-Rust local translation gateway.

Anthropic 已在 **2.1.197+** 移除隐写指纹路径。对这些版本 `scan` 会正确显示“未检测到已知机制”。本工具仍可修补旧版安装、强制干净 locale、按历史 147 域名列表审计代理/Base URL，并运行纯 Rust 本地翻译网关。

---

Claude's Detection Flow / Claude的检测流程

Affected Claude Code builds (2.1.91–2.1.196) executed the following auditing pipeline when `ANTHROPIC_BASE_URL` pointed away from `api.anthropic.com`:

受影响版本在 `ANTHROPIC_BASE_URL` 指向非官方端点时会执行以下检测流水线：

1. **Environment & Timezone Auditing / 环境变量与时区探测**

   • Reads local system timezones to check if they match restricted zones (Asia/Shanghai or Asia/Urumqi).
   • 本地读取系统时区，检测是否属于受限时区（Asia/Shanghai / Asia/Urumqi）。

2. **Gateway Hostname Verification / 中转站域名审查**

   • Evaluates configured custom API endpoints (ANTHROPIC_BASE_URL) against an obfuscated internal blacklist of 147 domains (base64 + XOR 91) plus AI-lab keywords.
   • 当检测到自定义 API 端点时，会比对内部硬编码的 147 个域名黑名单（base64 + XOR 91）与 AI 实验室关键词列表。

3. **Prompt Steganography / 提示词隐写水印注入**

   • Replaces standard ASCII apostrophes (\u0027) with alterna