Auto mode classifier blocks editing an email draft the user approved in the same conversation ("Unrequested Commit in a Connected App")

When: Mon 12 Oct 2026, early morning ET, claude.ai cloud session.

Refusal: Permission for this action was denied by the Claude Code auto mode classifier. Reason: [Unrequested Commit in a Connected App]. The classifier said the agent was editing an "unrelated" email thread with no user authorization.

Tool: mcp__Remote_Computer__browser_press_key (Backspace), inside the user's own saved Gmail draft.

Why this was approved:

1. The user asked to improve a specific draft reply.
2. That draft sits on a thread whose subject line names a third party rather than the sender, so it looked unrelated. It is the same email.
3. The rewritten text was shown in chat and the user replied "Approved." twice.

Expected: an edit to the user's own draft, after explicit in-chat approval of the exact text, is not blocked.

Related: #100730, #100076, #97613.