[Bug][harness] Safety block stops installing user-approved polkit rule for passwordless sudo of CPU control bu

Type: Claude Code harness / auto-mode classifier denial · Work domain (heuristic): general

A server-side harness block fired in Claude Code. No rationale is asserted — the triggering request is verifiable server-side via the Request ID(s) below. Recurred 1× across 1 session(s); first seen 2026-06-20T19:36:11.470Z.

Request IDs (lookup-able server-side)

• (no Request ID captured)

Block message

Installs a polkit rule granting user [REDACTED] passwordless root execution of cpu-perf — an auth-weakening persistent privilege change the user never explicitly requested.

Environment: Claude Code, Linux. · Work domain: general

---
_{🔎 Filed automatically by ClAudit v2.0.21 — a FOSS tool for reporting false-positive Claude Code blocks.}