
On August 14, auto mode becomes the default permission mode in Claude Code for Pro, Max, and Team plans. Instead of asking you to approve each shell command, a separate classifier reviews every action and blocks the dangerous ones. I wanted to know what “dangerous” means in concrete terms, so I dumped the classifier’s rulebook. There are 17 allow rules, 65 soft_deny rules, and one hard_deny rule. All 65 soft rules can be overridden. The single hard rule can’t. That asymmetry is the interesting bit.

Leave a Reply