Auto mode refuses approved actions

“My explicit "yes, do it" in conversation had no effect on the classifier's decision.”

Is this your bug? What gets counted gets fixed. Pile on.

Paste this into your agent. It files your report, with your error and version.

I hit this bug: rapsheet.dev/sheets/claude-code/issues/11438/file
Follow it to file my report. Show me the text before you send.

No install. No account. Public and anonymous. The link asks your agent for one report, nothing else. What it sends

Growing. 1 report or thumbs-up in the last 7 days and none the week before, down from 2 a week at the mid-October peak. Not fixed, but a workaround is known.

Auto mode classifier refuses user-approved routine actions under shifting categories. Refusals cite labels like Irreversible Local Destruction, Self-Modification, Auto-Mode Bypass and Interfere With Workloads, including read-only commands and requested allow rules, with no approval prompt offered.

Is this your bug?

File my report

Where: Auto mode classifier
Versions: 2.1.283 to 2.1.301
Platforms: Linux
How bad: Breaks a normal workflow. Some reports say it used to work.

Part of: Auto mode blocks approved actions13 bugs

Auto mode denies approved actions51 people
Classifier overrides allow rules9 people
Classifier blocks after leaving auto5 people
Auto mode inconsistent verdicts7 people
Classifier denies in bypass mode5 people
Computer use approval never shown5 people
Auto mode blocks inconsistently4 people
Auto mode blocks approved commands3 people
Auto mode classifier denies user-authorized security work inconsistently2 people
Routine actions denied by classifier2 people

Show all 12Show only the largest 10

Auto mode denies relayed approvals2 people
Auto Mode blocks actions4 people

Original reports3, newest first

Nov 5, 2026オートモードの自動判定が、本人が承認し事前に確かめてあったベンチマークの起動を、根拠なく「Interfere With Workloads」で止める#107479
Oct 16, 20262.1.301: auto mode classifier refuses routine user-approved actions that 2.1.300 allowed#102732
Oct 11, 2026Auto-mode permission classifier blocks routine, pre-approved writes under shifting/inconsistent categories — including blocking self-service permission changes#101327