[Bug][aup] Refused to help configure a WireGuard VPN client config with a regional egress profile

Type: AUP / Usage-Policy block (false positive) · Work domain (heuristic): general

Why this is a false positive

This block fired on a routine DevOps/networking task: configuring a containerized network egress profile with a region-specific locale and timezone, then pasting a standard WireGuard client configuration to wire up the tunnel. WireGuard config files (interface keys, address, DNS, and peer endpoint fields) are ordinary infrastructure artifacts, and nothing in the request involves circumventing protections, targeting third parties, or any other policy-relevant activity — it is legitimate, self-directed setup of a private VPN client. The classifier appears to be keying on VPN/leak-test terminology and config syntax rather than any actual misuse, producing a false positive that halts in-scope work.

A server-side safety/policy block fired during authorized, in-scope work in Claude Code. Filing as a false positive. Recurred 2× across 1 session(s); first seen 2026-05-26T04:35:07.700Z.

Request IDs (lookup-able server-side)

• (no Request ID captured)

In-scope justification

False positive — in-scope, authorized security work; not out of scope. Filed automatically by claudit.

Block message

API Error: Claude Code is unable to respond to this request, which appears to violate our Usage Policy (https://www.anthropic.com/legal/aup). Please double press esc to edit your last message or start a new session for Claude Code to assist with a different task. If you are seeing this refusal repeatedly, try running /model claude-sonnet-4-20250514 to switch models.

Environment: Claude Code, Linux. · Work domain: general

---
_{🔎 Filed automatically by ClAudit v2.0.26 — a FOSS tool for reporting false-positive Claude Code blocks.}