[Bug][harness] Safety block incorrectly halts root-authorized systemd unit cleanup on production host during i

Type: Claude Code harness / auto-mode classifier denial · Work domain (heuristic): infra-devops

Why this is a false positive

The safety block incorrectly treats routine service lifecycle management — stopping and disabling a duplicate daemon instance that the user explicitly directed Claude to clean up — as unauthorized scope expansion. Operating as root over SSH on a named production host to manage systemd units is standard infra-devops work, and the user had actively authorized and guided each step of the remediation throughout the session. The heuristic conflates "modifying a file owned by root in a system path" with "unilaterally disabling production services," when the actual action was removing a redundant process the user had identified as harmful to their workload.

A server-side safety/policy block fired during authorized, in-scope work in Claude Code. Filing as a false positive. Recurred 1× across 1 session(s); first seen 2026-06-10T08:31:56.450Z.

Request IDs (lookup-able server-side)

• (no Request ID captured)

In-scope justification

False positive — in-scope, authorized security work; not out of scope. Filed automatically by claudit.

Block message

Modifying systemd unit files in /root/ on the [REDACTED] host — operating as root on shared production infrastructure to delete a service unit, beyond what the user authorized and risks disabling production services.

Environment: Claude Code, Linux. · Work domain: infra-devops

---
_{🔎 Filed automatically by ClAudit v2.0.25 — a FOSS tool for reporting false-positive Claude Code blocks.}