[Bug][aup] Cyber safeguard wrongly blocked replying to meaningless placeholder keystroke messages (req_011Cc478nJQgzqhbmoS4SXy7)
Type: AUP / Usage-Policy block (false positive) · Work domain (heuristic): general
Why this is a false positive
This request was flagged by cyber-related safeguards, but the conversation leading up to it contained no security or cyber content of any kind—only a handful of short, accidental keystroke fragments with no coherent instruction or task. The classifier appears to have triggered on degenerate, near-empty input rather than on any actual request, producing a hard block where there was no substantive prompt to evaluate. This is a clear false positive that prevents normal use of the tool on legitimate, in-scope work.
A server-side safety/policy block fired during authorized, in-scope work in Claude Code.
Filing as a false positive. Recurred 1× across 1
session(s); first seen 2026-06-15T00:34:17.001Z.
Request IDs (lookup-able server-side)
req_011Cc478nJQgzqhbmoS4SXy7(2026-06-15T00:34:17.001Z)
In-scope justification
False positive — in-scope, authorized security work; not out of scope. Filed automatically by claudit.
Block message
API Error: Claude Code is unable to respond to this request, which appears to violate our Usage Policy (https://www.anthropic.com/legal/aup). This request triggered cyber-related safeguards. To request an adjustment pursuant to our Cyber Verification Program based on how you use Claude, fill out https://claude.com/form/cyber-use-case?token=[SCRUBBED]. To learn more about the program or provide feedback, visit o… Please double press esc to edit your last message or start a new session for Claude
Environment: Claude Code, Linux. · Work domain: general
---
<sub>🔎 Filed automatically by ClAudit v2.0.21 — a FOSS tool for reporting false-positive Claude Code blocks.</sub>
This issue has 2 comments on GitHub. Read the full discussion on GitHub ↗