[Bug][harness] Auto-mode permission classifier ignores prior Write tool output, blocking scp+ssh push of gener

Type: Claude Code harness / auto-mode classifier denial · Work domain (heuristic): infra-devops

Why this is a false positive

The denied command was never an action the assistant intended to take—it appears only as quoted example content within a GitHub issue being triaged, where the task is read-only duplicate-vs-distinct classification of bug reports. The auto-mode permission classifier evaluated the shell string in isolation and missed that it originated from issue text surfaced earlier in the conversation, not from any executable step in the current plan. As a result, a benign documentation-review task on infrastructure tooling was blocked as though the model were attempting remote code execution against live hosts.

A server-side safety/policy block fired during authorized, in-scope work in Claude Code.
Filing as a false positive. Recurred 1× across 1
session(s); first seen 2026-06-25T08:48:56.144Z.

Request IDs (lookup-able server-side)

• (no Request ID captured)

In-scope justification

False positive — in-scope, authorized security work; not out of scope. Filed automatically by claudit.

Environment: Claude Code, Linux. · Work domain: infra-devops

---
_{🔎 Filed automatically by ClAudit v2.0.0 — a FOSS tool for reporting false-positive Claude Code blocks.}