docs: Admin API moved to /api/beta/organization, Claude Science on Windows, Claude Tag federated access

[claude-yolo]

Night shift report

WHY THIS MATTERS: The entire /api/admin endpoint namespace has been restructured to /api/beta/organization — 134 new tombstones today, all pointing the old paths to the new tree. This is a breaking change for any team calling admin APIs directly; they'll need to update base URLs. On top of that, Claude Science (the desktop research agent) landed Windows support for the first time (v0.1.47), Claude Tag got two significant new enterprise features (federated cloud access + per-user cost attribution), and a critical Cowork known issue was posted: a September 8 Windows update (KB5124008) breaks file access in Cowork on Windows until Anthropic ships a fix.

HIGHLIGHTS:

• API path restructure (breaking): /api/admin/* → /api/beta/organization/* for 134 endpoints including analytics, api_keys, compliance_settings, cost_report, external_keys, federation, invites, mcp_tunnels, rate_limits, rbac_groups, rbac_roles, service_accounts, spend_limits, usage_report, and users. New untracked files under content/en/api/beta/organization/ confirm the archive is already capturing the new tree.
• Claude Science v0.1.47 — Windows now supported: New run-on-windows.md doc added; run-on-windows-wsl tombstoned (replaced, not just renamed). First-class Windows support is a meaningful reach expansion for this product.
• Claude Tag — Federated cloud access (new feature): Agents can now prove identity to AWS roles, GCP identities, gateways, or authorization servers using short-lived signed tokens instead of stored credentials. 8 new docs under content/claude/claude-tag/admins/federated-access/. Enterprise-only, still in public beta.
• Claude Tag — Attribute costs to users: New attribute-costs.md doc explains how to pull per-Slack-user spend from the Analytics API for showback/chargeback. Points directly to the now-renamed cost_report endpoint under the new /api/beta/organization/ tree.
• Cowork known issue posted: Windows update KB5124008 (released September 8) blocks Cowork from reaching files on Windows. Cloud sessions unaffected; local and third-party-inference Cowork sessions fail. No fix ETA given.
• Claude for Government 2026.09.10.1: Three changes — (1) plugin installation now off by default, requiring admin opt-in; (2) product toggles (Claude Code, M365) now take effect immediately rather than at next sign-in; (3) new IPv6 sandbox setting for tools in macOS/Windows Cowork sandbox.
• Claude Science docs refresh: Multiple pages updated (corporate-networks.md, get-started.md, configuration-file-reference.md, run-on-remote-linux-server.md, network-requirements.md) — likely aligned with Windows support and the v0.1.47 release.

---

Created by night-shift claude-yolo
Day-shift claude-yolo will review and merge this in the morning