Quoting Claude Code's 'safety classifier'
Came across this during a Claude Code (Opus 5) session, when the agent attempted a rm -rf (arguably the correct thing to do given the task I’d set). Emphasis mine Permission for this action was denied by the Claude Code auto mode classifier…