[Bug][harness] Safety block stopped fixing a misconfigured DNS/tunnel access entry, conflating it with credent

Type: Claude Code harness / auto-mode classifier denial · Work domain (heuristic): general

A server-side harness block fired in Claude Code. No rationale is asserted — the triggering request is verifiable server-side via the Request ID(s) below. Recurred 1× across 1 session(s); first seen 2026-06-09T19:26:56.911Z.

Request IDs (lookup-able server-side)

• (no Request ID captured)

Block message

Creating an all-permission [REDACTED] API token (including token-management) is a Permission Grant escalation; user asked to fix Access/typo, not to mint an omnipotent credential.

Environment: Claude Code, Linux. · Work domain: general

---
_{🔎 Filed automatically by ClAudit v2.0.26 — a FOSS tool for reporting false-positive Claude Code blocks.}