[Bug][aup] Safety block halts building a Cloudflare-free bot-resistant signup modal after a frustrated aside (req_011CccbmUeBYX9RBxjDhV7yE)

Triage: kind aup · domain crypto-secrets · flagging model Fable 5 · severity session-halted (blocked authorized work) · reproducible: yes — server-side via the Request ID(s) below

Type: AUP / Usage-Policy block (false positive) · Work domain (heuristic): crypto-secrets

Why this is a false positive

The safety classifier halted an active coding session over a routine, in-scope development request: building a signup form with modern bot-mitigation (rate limiting, challenge/CAPTCHA-style protections). This is standard defensive anti-abuse work that a user is fully authorized to implement on their own web property, and it contains no request for harmful, deceptive, or policy-violating content — the surrounding session was ordinary front-end and deployment work. Flagging benign abuse-prevention engineering as an AUP violation is a false positive, and blocking the entire session rather than the message alone makes the disruption disproportionate.

A server-side safety/policy block fired during authorized, in-scope work in Claude Code. Filing as a false positive. Recurred 1× across 1 session(s); first seen 2026-07-02T04:28:50.507Z.

Request IDs (lookup-able server-side)

• req_011CccbmUeBYX9RBxjDhV7yE (2026-07-02T04:28:50.507Z)

In-scope justification

False positive — in-scope, authorized security work; not out of scope. Filed automatically by claudit.

Block message

API Error: Fable 5's safeguards flagged this message (https://www.anthropic.com/legal/aup). This sometimes happens with safe, normal conversations. Claude Code can't respond to this request with Fable 5.

Double press esc to edit your last message, or try a different model with /model.

Send feedback with /feedback or learn more: https://support.claude.com/en/articles/15363606

Request ID: req_011CccbkhW53upZPg8PmqYAF

Environment: Claude Code, Linux. · Work domain: crypto-secrets

Related reports (same work session, linked)

Distinct false-positive blocks from the same work session, each its own report:
#73232, #73233, #73234, #73235, #73236, #73237, #73238, #73239, #73240, #73241, #73242, #73243, #73244, #73245, #73246, #73247, #73248, #73249, #73250, #73261

---
_{🔎 Filed automatically by ClAudit v2.0.101 — a FOSS tool for reporting false-positive Claude Code blocks.}