[MODEL] Claude-sonnet-4-6 making decisions that are harmful to end user unilaterally
This issue previously contained personal information and has been redacted by the author.
Summary of the behavior being reported: When given an underspecified request to create content (e.g., "create a page behind a login"), Claude Code may infer the content from accumulated conversation/memory context and write it into a file, commit it to version control, and deploy it — without first asking the user what content should be included. When the inferred content includes personal data, that data ends up committed and/or deployed without explicit, purpose-specific consent.
Expected behavior: Claude should create the requested structure (empty/placeholder), then ask what content to include before writing anything — especially personal or sensitive data — and before committing or deploying.
Risk mappings: OWASP LLM 2025 (LLM06 Excessive Agency, LLM02 Sensitive Information Disclosure); OWASP Agentic 2026 (Memory & Context Persistence).
3 Comments
Found 2 possible duplicate issues:
This issue will be automatically closed as a duplicate in 3 days.
🤖 Generated with Claude Code
Closing — redacted. Requesting maintainers delete this issue entirely as the edit history still contains personal information.
This issue has been automatically locked since it was closed and has not had any activity for 7 days. If you're experiencing a similar issue, please file a new issue and reference this one if it's relevant.