[BUG] Cyber safeguards being hit despite being enrolled in CVP/silently being removed from CVP?

Preflight Checklist

• [x] I have searched existing issues and this hasn't been reported yet
• [x] This is a single bug report (please file separate reports for different bugs)
• [x] I am using the latest version of Claude Code

What's Wrong?

I'm getting hit with cyber blocks w/ Opus 4.8 on requests despite being enrolled in CVP (when I try to enroll again, I get sent the "You are already enrolled in the Cyber Verification Program!" email). While the requests are cyber-related, they are under my CVP request's usecases. I've double checked the org I'm using and I'm using the same org that was enrolled in CVP. In addition, since a while ago the error messages started referring to me not even being in the CVP?

What Should Happen?

Claude should be able to do the requests.

Error Messages/Logs

● Web Search("CodeDefender blog jump tables x86-64 obfuscation 2024")
Did 1 search in 8s

● API Error: Opus 4.8 has safety measures that flagged this message for a cybersecurity topic. If your work requires this access, you can apply for an exemption: https://claude.com/form/cyber-use-case?token=xxxxxxxxxxxxxxxxxxxxxx

  Please double press esc to edit your last message or start a new session for Claude Code to assist with a different task.

  Send feedback with /feedback or learn more: https://support.claude.com/en/articles/15363606

  Request ID: req_011CcHJN7PorEBuixvkVu8UG

Steps to Reproduce

1. Make a generally benign cyber-related request w/ CVP (example web search is in error log)
2. Trigger safeguard

Claude Model

Opus

Is this a regression?

I don't know

Last Working Version

_No response_

Claude Code Version

2.1.185

Platform

Anthropic API

Operating System

Ubuntu/Debian Linux

Terminal/Shell

Other

Additional Information

_No response_