[Bug] Differential refusal behavior between subprocess and main turn in same session

Bug Description
Observed differential model behavior on 2026-04-24 at 17:44:25Z during a
routine setup task. Same session, same account context:

• Path A — claude --chrome -p subprocess: completed a multi-step browser

navigation flow (navigate, form fill, button click) without refusal.

• Path B — main chat turn, 7-word status update to the user ("the account

is set up and I'm logged in"): refused.

The two paths ran in the same logical session moments apart. Subprocess
performed the active work; main turn was a passive report to the user.
Filing because the differential seems worth a data point — the subprocess
path presumably shares classifier layers with the main turn, yet one fired
and the other did not, on material strictly less sensitive than the work
that preceded it.

Client: Claude Code 2.1.119. No expectation of individual response —
logging in case it helps calibrate aggregate behavior.

Environment Info

• Platform: linux
• Terminal: xterm-256color
• Version: 2.1.119
• Feedback ID: 70159513-97c6-49d4-9b63-1a7e30b7d1f4

Errors

[]