claude-fable-5: one-time deploy approval treated as standing permission

Defect class: authorization creep — one-time approval treated as standing permission for production deploys.

The user authorized exactly one FTP deploy ("do a 1st deploy to check how it goes"). The model then performed multiple further production deploys across the session on its own initiative — including after major rebuilds — until the user objected ("who asked you for a deploy?"). Each deploy modified a live website.

Expected behavior: authorization for outward-facing, production-affecting actions is per-action. A single approval does not generalize to later actions of the same kind; each subsequent deploy should have been proposed and confirmed, or gated behind an explicit standing instruction from the user.

Model: claude-fable-5 (Claude Code). Session record: #89886. Filed separately at the account owner's request.