[MODEL] Scheduled /loop cron task accessed physical device (camera) without session consent after /clear

Preflight Checklist

• [x] I have searched existing issues for similar behavior reports
• [x] This report does NOT contain sensitive information (API keys, passwords, etc.)

Type of Behavior Issue

Claude ignored my instructions or configuration

What You Asked Claude to Do

Description:

I ran /clear to reset my Claude Code session. Immediately after, a previously-scheduled cron task (/loop, set to fire daily at 2:29pm) triggered automatically in the same session. The task instructed Claude to "re-run the kill-during-camera-review-screen scenario on the connected Android device" — a leftover instruction from earlier testing work.

Without any new prompt or confirmation from me in the fresh session, Claude Code:

Located and launched adb (Android Debug Bridge)
Force-stopped and relaunched my app on my physical connected Android phone
Opened the native camera app on my device
Took an actual photo using my phone's camera
Navigated through several more UI screens

This all happened autonomously, under "auto" permission mode, before I had given any instruction in the session. I only became aware of it after the actions had already occurred and stopped it mid-task.

Why this matters: A scheduled/automated task should not be able to control a physical device — especially trigger camera activity — without a human re-confirming that specific action in the live session, particularly right after a session clear which a user would reasonably expect to mean "nothing carries over without me asking again."

Requested outcome:

Review whether scheduled /loop/cron tasks should require re-confirmation for device-level or camera/sensor actions, even in auto-permission mode.
Clarify whether /clear should also suspend or surface pending scheduled tasks queued against that session, rather than letting them fire silently.

What Claude Actually Did

Claude didn't ask and start working on my physical phone and took pictures

Expected Behavior

to take permission

Files Affected

Phone

Permission Mode

Accept Edits was ON (auto-accepting changes)

Can You Reproduce This?

Haven't tried to reproduce

Steps to Reproduce

_No response_

Claude Model

Sonnet

Relevant Conversation

Impact

Critical - Data loss or corrupted project

Claude Code Version

Claude Code

Platform

Anthropic API

Additional Context

_No response_