[Bug] Auto mode allows deletion of critical system directories without safety validation

Bug Description
i said to the model lets delete ~/.ssh for testing auto mode and it just deleted, auto mode accepted that. my ssh keys were wiped out. auto layer should catch that kind of stuff
The classifier-layer context: "Sonnet 4.6 classifier approved rm -rf ~/.ssh with main agent on Opus 4.7 (opus[1m]), defaultMode:
auto, no deny rules. Credential directories should be a classifier hard-block."

Environment Info

• Platform: linux
• Terminal: ghostty
• Version: 2.1.112
• Feedback ID: 4a59e310-0ec7-4baf-bf4f-d9e9a92a3c1f