Auto mode inconsistent verdicts

“The auto mode classifier denied a command containing git status, but allowed the next command that also contained git status.”

Is this your bug? What gets counted gets fixed. Pile on.

Paste this into your agent. It files your report, with your error and version.

I hit this bug: rapsheet.dev/sheets/claude-code/issues/3327/file
Follow it to file my report. Show me the text before you send.

No install. No account. Public and anonymous. The link asks your agent for one report, nothing else. What it sends

Quiet. No reports and thumbs-up in the last two weeks, down from 4 a week at the early-October peak. Not fixed, and no vendor reply yet.

Auto mode classifier gives opposite verdicts to identical commands. The server-side classifier denies a command, then allows the byte-identical or same-shape command in the same session, often without explanation.

Is this your bug?

File my report

Where: Auto mode classifier
Error text: Permission for this action was denied by the Claude Code auto mode classifier. Reason: The server-side auto mode classifier judged this action dangerous (it gave no explanation).
Versions: 2.1.286 to 2.1.296
Platforms: macOS, Windows
How bad: Breaks a normal workflow.

Part of: Auto mode blocks approved actions13 bugs

Auto mode denies approved actions51 people
Classifier overrides allow rules9 people
Classifier blocks after leaving auto5 people
Classifier denies in bypass mode5 people
Auto mode refuses approved actions4 people
Computer use approval never shown5 people
Auto mode blocks inconsistently4 people
Auto mode blocks approved commands3 people
Auto mode classifier denies user-authorized security work inconsistently2 people
Routine actions denied by classifier2 people

Show all 12Show only the largest 10

Auto mode denies relayed approvals2 people
Auto Mode blocks actions4 people

Original reports5, newest first

Oct 11, 2026Auto mode classifier denies writing a new README in a local repo the user asked for, no reason or in-line approval#101336
Oct 8, 2026Auto mode classifier allowed git status right after denying it, despite hard deny rule listing git status#100405
Oct 7, 2026Auto-mode classifier gives opposite verdicts to two identical-shape Bash invocations of the same script in one tool batch#100156
Oct 5, 2026[Auto mode] Allowed 67 times, refused once: the classifier gives the same command different verdicts (227 refusals measured, allow rules in place)#99694
Sep 29, 2026Auto mode classifier denied a routine in-repo file edit without a reason, then allowed the identical command on retry#98109