[Bug][aup] Safety block halted continuing an in-progress general coding session after model switch (req_011Cc478QG6YuEnKEARVu1WD)

Open 💬 2 comments Opened Jun 25, 2026 by sworrl

Type: AUP / Usage-Policy block (false positive) · Work domain (heuristic): general

Why this is a false positive

This false positive triggered on a benign session-resume turn: the conversation leadup contains only a model switch and trivial greetings ("HELLO!?", "asd"), with no cyber-related request of any kind, yet the cyber-safeguard fired and blocked the response. The block appears to have been driven by ambient session context or memory metadata rather than the actual user message, since there is no operative request in the turn that could plausibly violate the Usage Policy. The work is routine, authorized administration and development on the user's own systems, and the safeguard is preventing the assistant from responding to ordinary, in-scope conversation.

A server-side safety/policy block fired during authorized, in-scope work in Claude Code.
Filing as a false positive. Recurred across 1
session(s); first seen 2026-06-15T00:34:11.791Z.

Request IDs (lookup-able server-side)

  • req_011Cc478QG6YuEnKEARVu1WD (2026-06-15T00:34:11.791Z)
  • req_011Cc478fiXMDJWVdZjUgucY (2026-06-15T00:34:15.570Z)

In-scope justification

False positive — in-scope, authorized security work; not out of scope. Filed automatically by claudit.

Block message

API Error: Claude Code is unable to respond to this request, which appears to violate our Usage Policy (https://www.anthropic.com/legal/aup). This request triggered cyber-related safeguards. To request an adjustment pursuant to our Cyber Verification Program based on how you use Claude, fill out https://claude.com/form/cyber-use-case?token=[SCRUBBED]. To learn more about the program or provide feedback, visit o… Please double press esc to edit your last message or start a new session for Claude

Environment: Claude Code, Linux. · Work domain: general

---
<sub>🔎 Filed automatically by ClAudit v2.0.21 — a FOSS tool for reporting false-positive Claude Code blocks.</sub>

View original on GitHub ↗

This issue has 2 comments on GitHub. Read the full discussion on GitHub ↗