[Bug][cyber] Safety filter blocked editing a web page's "What this tool refuses to do" disclosure copy (req_011Cbx9wgfrBfwtuVwqdbm3g)

Triage: kind cyber · domain general · severity session-halted (blocked authorized work) · reproducible: yes — server-side via the Request ID(s) below

Type: Cybersecurity safety-filter false positive · Work domain (heuristic): general

Why this is a false positive

The Fable 5 safety filter blocked a routine infrastructure-administration request — managing self-hosted containers over SSH and clarifying whether a web page was a single-page app or static HTML — none of which involves offensive security, exploitation, or any restricted cybersecurity capability. The trigger appears to be surface-level keyword matching on terms like "SSH," "access," and "management" rather than any analysis of intent or actual content, since the conversation concerned ordinary sysadmin and front-end development work on the user's own systems. This is a clear false positive: legitimate, in-scope DevOps and web-development tasks are being refused, which makes the model unusable for standard engineering work.

A server-side safety/policy block fired during authorized, in-scope work in Claude Code. Filing as a false positive. Recurred 1× across 1 session(s); first seen 2026-06-11T21:07:43.471Z.

Request IDs (lookup-able server-side)

• req_011Cbx9wgfrBfwtuVwqdbm3g (2026-06-11T21:07:43.471Z)

In-scope justification

False positive — in-scope, authorized security work; not out of scope. Filed automatically by claudit.

Block message

API Error: Fable 5 has safety measures that flag messages on most cybersecurity or biology topics (https://www.anthropic.com/legal/aup). They may flag safe, normal content as well. These measures let us bring you Mythos-level capability in other areas sooner, and we're working to refine them. Claude Code can't respond to this request with Fable 5.

Double press esc to edit your last message, or try a different model with /model.

Send feedback with /feedback or learn more: https://support.claude

Environment: Claude Code, Linux. · Work domain: general

---
_{🔎 Filed automatically by ClAudit v2.0.85 — a FOSS tool for reporting false-positive Claude Code blocks.}