Auto mode blocks read-only commands

“harness wrong classification for basic subdomain tooling”

Is this your bug? What gets counted gets fixed. Pile on.

Paste this into your agent. It files your report, with your error and version.

I hit this bug: rapsheet.dev/sheets/claude-code/issues/964/file
Follow it to file my report. Show me the text before you send.

No install. No account. Public and anonymous. The link asks your agent for one report, nothing else. What it sends

Quiet. No reports in the last two weeks, down from 2 a week at the late-September peak.

Auto mode classifier blocks read-only commands as destructive. Harmless reads like cat .prettierrc, grep, dry-run scripts and prod sizing queries get blocked, sometimes after one earlier block.

Is this your bug?

File my report

Where: Auto mode classifier
Versions: 2.1.281 to 2.1.283
Platforms: macOS, Windows
How bad: Breaks a normal workflow.

Not quite your bug?

Safeguards refuse work requests48 people
Auto mode gives no verdict81 people
Safeguards block requests47 people

Original reports3, newest first

Sep 28, 2026Auto mode classifier incorrectly flags harmless read-only operations as destructive#97914
Sep 27, 2026Incorrect harness classification for subdomain tooling#97691
Sep 23, 2026Read-only queries blocked despite proper authorization#96575

Auto mode blocks read-only commands

Is this your bug? What gets counted gets fixed. Pile on.

Is this your bug?

Not quite your bug?

Original reports3, newest first

Do you work on Claude Code?