[Bug][aup] Deleting Claude memory/history files from a local project directory blocked by cyber safeguards (req_011Cbu1oUB6bS3HknzaE7C5a)

Open 💬 2 comments Opened Jun 25, 2026 by sworrl

Type: AUP / Usage-Policy block (false positive) · Work domain (heuristic): general

Why this is a false positive

The request involved deleting Claude Code's own session memory and history files from a local project directory — a routine file-cleanup task with no network, credential, or exploit component. The safety block was triggered despite the conversation consisting entirely of file-discovery commands and a clarifying question about why the assistant was reading before deleting; there was no mention of attack tooling, vulnerabilities, or any target system. The "cyber-related safeguards" classifier appears to have pattern-matched on directory or file names associated with a security-adjacent project without evaluating the actual operation being requested (local file deletion of the assistant's own artifacts).

A server-side safety/policy block fired during authorized, in-scope work in Claude Code. Filing as a false positive. Recurred across 1 session(s); first seen 2026-06-10T05:19:00.975Z.

Request IDs (lookup-able server-side)

  • req_011Cbu1oUB6bS3HknzaE7C5a (2026-06-10T05:19:00.975Z)

In-scope justification

False positive — in-scope, authorized security work; not out of scope. Filed automatically by claudit.

Block message

API Error: Claude Code is unable to respond to this request, which appears to violate our Usage Policy (https://www.anthropic.com/legal/aup). This request triggered cyber-related safeguards. To request an adjustment pursuant to our Cyber Verification Program based on how you use Claude, fill out https://claude.com/form/cyber-use-case?token=[SCRUBBED]. To learn more about the program or provide feedback, visit o… Please double press esc to edit your last message or start a new session for Claude

Environment: Claude Code, Linux. · Work domain: general

---
<sub>🔎 Filed automatically by ClAudit v2.0.25 — a FOSS tool for reporting false-positive Claude Code blocks.</sub>

View original on GitHub ↗

This issue has 2 comments on GitHub. Read the full discussion on GitHub ↗