claude.ai cloud session: auto mode classifier blocks building (not running) a script that replaces a stale project doc with its updated copy
Surface: claude.ai web chat bound to a Project, Claude Code based cloud harness. CLI template fields: not applicable.
What happened (12 Oct 2026, ~05:15 ET): the user asked Claude to make sure a second claude.ai account of theirs had current project knowledge. Claude found that account's copy of one doc was a day stale and prepared a browser function that would POST the updated doc and then DELETE the stale copy, only if the POST succeeded.
The denied call was a local Bash step that only wrote that function to a scratch file (nothing was executed against any account). Denied as [Irreversible Deletion (general)].
Why this is a bug: (1) the blocked command deleted nothing; it wrote a text file. (2) The deletion it described is the user's own doc in the user's own project, replaced in the same call by a newer copy, which is the normal way to update a doc when no in-place edit exists.
Expected: judge the action that runs, not text inside a file being written; for a user-requested replace of their own doc, offer an in-session confirm instead of a hard deny.
Workaround used: added the updated doc under a new name and left the stale one in place, so the project now holds two versions.
Related: #101465 (same session, an approved WhatsApp send blocked).