Classifier overrides allow rules

“powershell -File "C:\...\Run-Day.ps1" -Post (full path) -> blocked, reason: "Production Deploy"”

Is this your bug? What gets counted gets fixed. Pile on.

Paste this into your agent. It files your report, with your error and version.

I hit this bug: rapsheet.dev/sheets/claude-code/issues/2818/file
Follow it to file my report. Show me the text before you send.

No install. No account. Public and anonymous. The link asks your agent for one report, nothing else. What it sends

Quiet. No reports and thumbs-up in the last two weeks, down from 3 a week at the late-September peak. Not fixed, but a workaround is known.

Auto-mode classifier blocks commands matching explicit allow rules. Commands listed in permissions.allow are hard-denied with category reasons like "Production Deploy", with no prompt to approve.

Is this your bug?

File my report

Where: auto permission mode
Error text: Permission for this action was denied by the Claude Code auto mode classifier. Reason: [Irreversible Local Destruction]
Versions: 2.1.267 to 2.1.299
Platforms: macOS, Windows
How bad: Breaks a normal workflow. Some reports say it used to work.

Part of: Auto mode blocks approved actions13 bugs

Auto mode denies approved actions51 people
Classifier blocks after leaving auto5 people
Auto mode inconsistent verdicts7 people
Classifier denies in bypass mode5 people
Auto mode refuses approved actions4 people
Computer use approval never shown5 people
Auto mode blocks inconsistently4 people
Auto mode blocks approved commands3 people
Auto mode classifier denies user-authorized security work inconsistently2 people
Routine actions denied by classifier2 people

Show all 12Show only the largest 10

Auto mode denies relayed approvals2 people
Auto Mode blocks actions4 people

Original reports8, newest first

Oct 24, 2026#104794
Oct 15, 2026Auto-mode safety check refused an explicitly approved production migration. I s…#102636
Oct 7, 2026Auto mode: classifier denies a Bash command that an explicit allow rule permits (no prompt, no way to approve)#100255
Oct 7, 2026Auto-mode classifier hard-denies commands explicitly allowed by user permission rules, with no path for the user to approve#100221
Sep 24, 2026Auto mode classifier inconsistently blocks production deploys explicitly allowed in autoMode.allow#96943
Sep 24, 2026Auto-mode classifier blocks a command that literal-text-matches an existing allow rule#96772
Sep 22, 2026auto-mode classifier vetoes commands present in permissions.allow (no override path)#95996
Sep 16, 2026Auto-mode credential classifier blocks a previously-working SQL connection with no config change#94726