Auto mode classifier blocks user-approved actions; no override available over Remote Control

What happened

In an auto-mode session driven over Remote Control, I asked Claude to transfer one of my GitHub repos to my own new org (gh api -X POST repos/<me>/<repo>/transfer -f new_owner=<my-org>).

• The auto-mode classifier denied it ("Modify Shared Resources").
• I approved it explicitly in chat. It was denied again.
• My settings already allow Bash(gh *); the classifier overrides that.
• I tried /permissions to add a rule: "/permissions isn't available over Remote Control."
• I tried /feedback to report it: that didn't work for me either.

So the human in the loop had no way to override or approve from the device they were using, and no way to report it. I ended up doing the transfer by hand in the GitHub UI. The same transfer of a lower-stakes repo had been allowed earlier in the same session.

Expected

When the user explicitly approves a blocked action, there should be a way to let it through from the client they're on: an approve button on the denial, /permissions over Remote Control, or treating an explicit in-chat approval as sufficient. At minimum, /feedback should work so this can be reported.

Environment

• Claude Code CLI, auto mode, Remote Control session
• macOS (Darwin 25.5)
• Date: 2026-10-07