[Bug][aup] Blocked while auditing recent commits' interactions with a companion service after a QR/passkey fea (req_011CccXRv3t5c3iyTdihK8kK)

Triage: kind aup · domain general · severity session-halted (blocked authorized work) · reproducible: yes — server-side via the Request ID(s) below

Type: AUP / Usage-Policy block (false positive) · Work domain (heuristic): general

Why this is a false positive

The flagged request asked the assistant to audit recently changed code in the user's own repository, tracing the logic that interacts with an internal application component since a prior feature update. This is routine, in-scope software engineering work — a read-only code review of the developer's own project with no security-sensitive, harmful, or policy-relevant content in the prompt or surrounding conversation. The block appears to have been triggered by benign internal shorthand or acronyms in the request rather than by anything resembling an actual AUP violation.

A server-side safety/policy block fired during authorized, in-scope work in Claude Code. Filing as a false positive. Recurred 1× across 1 session(s); first seen 2026-07-02T03:32:04.634Z.

Request IDs (lookup-able server-side)

• req_011CccXRv3t5c3iyTdihK8kK (2026-07-02T03:32:04.634Z)

In-scope justification

False positive — in-scope, authorized security work; not out of scope. Filed automatically by claudit.

Block message

API Error: Fable 5's safeguards flagged this message (https://www.anthropic.com/legal/aup). This sometimes happens with safe, normal conversations. Claude Code can't respond to this request with Fable 5.

Double press esc to edit your last message, or try a different model with /model.

Send feedback with /feedback or learn more: https://support.claude.com/en/articles/15363606

Request ID: req_011CccXRv3t5c3iyTdihK8kK

Environment: Claude Code, Linux. · Work domain: general

---
_{🔎 Filed automatically by ClAudit v2.0.100 — a FOSS tool for reporting false-positive Claude Code blocks.}