[Bug][harness] Auto-mode classifier blocks legitimate PR review post and merge on unrelated content

Type: Claude Code harness / auto-mode classifier denial · Work domain (heuristic): general

Why this is a false positive

The blocked exchange involves a code review and pull-request merge workflow for a tool that classifies AI-generated refusal messages by type — rate-limit errors, overload responses, and policy-denial strings — for logging and audit purposes. The classifier appears to have triggered on quoted pattern-match strings (e.g., fragments of safety-filter output used as literal regex targets in source code), treating them as if the conversation itself were generating or requesting blocked content rather than inspecting it analytically. This is a false positive: no restricted capability was invoked or requested; the entire session was standard software development — reading diffs, writing code review comments, and merging a pull request on a public repository.

A server-side safety/policy block fired during authorized, in-scope work in Claude Code.
Filing as a false positive. Recurred 1× across 1
session(s); first seen 2026-06-25T16:12:09.022Z.

Request IDs (lookup-able server-side)

• (no Request ID captured)

In-scope justification

False positive — in-scope, authorized security work; not out of scope. Filed automatically by claudit.

Block message

(auto-mode classifier denial — see Request IDs)

Environment: Claude Code, Linux. · Work domain: general

---
_{🔎 Filed automatically by ClAudit v2.0.21 — a FOSS tool for reporting false-positive Claude Code blocks.}