[Bug] Cyber-misuse safeguards block all available models with no fallback, rendering product unusable

Open 💬 0 comments Opened Jun 10, 2026 by Call-me-Boris-The-Razor

Bug Description
Subject: Cyber safeguards now block BOTH models — no usable model left for legitimate first-party defensive work (ref #63751) I'm a paying Claude Code customer and a solo developer. Today I could not do any work, because the cyber-misuse safeguards blocked BOTH available models with no working fallback: - Fable 5 flagged my message ("cybersecurity or biology topics") and AUTO-SWITCHED me to Opus 4.8. - Opus 4.8 then HARD-FAILED with the AUP cyber-safeguard error and refused to respond. Request ID: req_011Cbv4dQzBQ6aQgQJ3sWNbL Net effect: there is no model I can use. The auto-switch on a flag lands me on a second model that also blocks. I pay for this product and literally cannot operate it. What I was actually doing: a routine defensive security audit of my OWN SaaS — a logistics rate-quoting platform. The specific change that tripped the filter was fixing how my server reads the client IP: using the framework's resolved address (request.ip) instead of trusting a user-supplied X-Forwarded-For header. This is textbook, defensive application-security hygiene on my own first-party code. There is no target, no third party, no offensive activity. This is a RECURRING false positive, already tracked under case #63751. I previously applied to the Cyber Verification Program and was DECLINED as a solo developer — so the remedy you point customers to is closed to exactly my segment. I'm left with a product I can't use and no working path to fix it. Requests: 1. Escalate and resolve #63751 — this keeps happening. 2. Reconsider the Cyber Verification decline for verified individual/solo paying customers, or provide an alternative allow-path for first-party defensive work. 3. Tune the classifier: fixing header-trust / client-IP handling in one's OWN code is core appsec hygiene, not offensive cyber activity, and must not trip these safeguards. 4. At minimum, fix the fallback: when one model declines a request, the auto-switch must not route me to a second model that also hard-blocks — leaving zero usable models. Session Request IDs are attached. I want a human response, not a form.

Environment Info

Platform: darwin
Terminal: Apple_Terminal
Version: 2.1.170
Feedback ID: 27499c6f-b7b8-4b1a-b6c3-bcae08ca3c68

Errors

[{"error":"Error: Tool Glob not found\n    at URK (/$bunfs/root/src/entrypoints/cli.js:4123:15779)\n    at U6 (/$bunfs/root/src/entrypoints/cli.js:589:21318)\n    at A3 (/$bunfs/root/src/entrypoints/cli.js:589:40397)\n    at R4H (/$bunfs/root/src/entrypoints/cli.js:589:51323)\n    at n5 (/$bunfs/root/src/entrypoints/cli.js:589:88858)\n    at u5 (/$bunfs/root/src/entrypoints/cli.js:589:87825)\n    at G3 (/$bunfs/root/src/entrypoints/cli.js:589:87647)\n    at rx (/$bunfs/root/src/entrypoints/cli.js:589:83953)\n    at eH (/$bunfs/root/src/entrypoints/cli.js:589:6507)\n    at $h8 (/$bunfs/root/src/entrypoints/cli.js:582:5415)","timestamp":"2026-06-10T15:19:53.973Z"},{"error":"Error: Tool Glob not found\n    at URK (/$bunfs/root/src/entrypoints/cli.js:4123:15779)\n    at U6 (/$bunfs/root/src/entrypoints/cli.js:589:21318)\n    at A3 (/$bunfs/root/src/entrypoints/cli.js:589:40397)\n    at R4H (/$bunfs/root/src/entrypoints/cli.js:589:51323)\n    at n5 (/$bunfs/root/src/entrypoints/cli.js:589:88858)\n    at u5 (/$bunfs/root/src/entrypoints/cli.js:589:87825)\n    at G3 (/$bunfs/root/src/entrypoints/cli.js:589:87647)\n    at rx (/$bunfs/root/src/entrypoints/cli.js:589:83953)\n    at eH (/$bunfs/root/src/entrypoints/cli.js:589:6507)\n    at $h8 (/$bunfs/root/src/entrypoints/cli.js:582:5415)","timestamp":"2026-06-10T15:36:30.556Z"},{"error":"Error: Tool Glob not found\n    at URK (/$bunfs/root/src/entrypoints/cli.js:4123:15779)\n    at U6 (/$bunfs/root/src/entrypoints/cli.js:589:21318)\n    at A3 (/$bunfs/root/src/entrypoints/cli.js:589:40397)\n    at R4H (/$bunfs/root/src/entrypoints/cli.js:589:51323)\n    at n5 (/$bunfs/root/src/entrypoints/cli.js:589:88858)\n    at u5 (/$bunfs/root/src/entrypoints/cli.js:589:87825)\n    at G3 (/$bunfs/root/src/entrypoints/cli.js:589:87647)\n    at rx (/$bunfs/root/src/entrypoints/cli.js:589:83953)\n    at eH (/$bunfs/root/src/entrypoints/cli.js:589:6507)\n    at $h8 (/$bunfs/root/src/entrypoints/cli.js:582:5415)","timestamp":"2026-06-10T15:36:32.270Z"},{"error":"Error: Tool Glob not found\n    at URK (/$bunfs/root/src/entrypoints/cli.js:4123:15779)\n    at U6 (/$bunfs/root/src/entrypoints/cli.js:589:21318)\n    at A3 (/$bunfs/root/src/entrypoints/cli.js:589:40397)\n    at R4H (/$bunfs/root/src/entrypoints/cli.js:589:51323)\n    at n5 (/$bunfs/root/src/entrypoints/cli.js:589:88858)\n    at u5 (…

Note: Content was truncated.

View original on GitHub ↗