[Bug][aup] Provisioning an isolated WAN-only test VLAN and lightweight Linux VM was wrongly blocked (req_011CbtG1tv6Bqn5JwwHhcs4n)

Type: AUP / Usage-Policy block (false positive) · Work domain (heuristic): defensive-hardening

Why this is a false positive

Defensive network-hardening work—provisioning an isolated test VM on a segregated VLAN with firewall rules restricting it to WAN-only access—was flagged as a Usage Policy violation. This is standard, legitimate lab segmentation on the user's own infrastructure, with no exploitation, targeting of third parties, or malicious capability involved. The block appears to be triggered by profanity and security-adjacent terminology ("isolate," "firewall") in the conversation rather than any actual policy-violating request.

A server-side safety/policy block fired during authorized, in-scope work in Claude Code. Filing as a false positive. Recurred 1× across 1 session(s); first seen 2026-06-09T19:45:21.141Z.

Request IDs (lookup-able server-side)

• req_011CbtG1tv6Bqn5JwwHhcs4n (2026-06-09T19:45:21.141Z)

In-scope justification

False positive — in-scope, authorized security work; not out of scope. Filed automatically by claudit.

Block message

API Error: Claude Code is unable to respond to this request, which appears to violate our Usage Policy (https://www.anthropic.com/legal/aup). Please double press esc to edit your last message or start a new session for Claude Code to assist with a different task.

Request ID: req_011CbtG1tv6Bqn5JwwHhcs4n

Environment: Claude Code, Linux. · Work domain: defensive-hardening

---
_{🔎 Filed automatically by ClAudit v2.0.26 — a FOSS tool for reporting false-positive Claude Code blocks.}