[Feature Request] CVP approval process for legitimate defensive security operations and system administration

Status Open
Reported on v2.1.283
Maintainer reply None cached
Activity 0 comments · opened Sep 26, 2026

Bug Description
Use case: Defensive security operations (SOC) and system administration
for a regional government cybersecurity center.

We operate a Security Operations Center (SOC) for regional government
infrastructure. Our work is entirely defensive: security monitoring,
log analysis, incident detection and response, hardening of our own
systems, and routine system administration of servers we own and manage.

We use Claude and Claude Code as an assistant for these defensive and
operational tasks — writing and reviewing our own monitoring/detection
tooling, troubleshooting our servers, and general sysadmin work.

The real-time cyber safeguards have been flagging routine, legitimate
work. In one recent case, asking for help troubleshooting an SSH
"Permission denied" error while connecting to a machine on our own
internal network (192.168.x.x) was blocked as [cyber], even though this
is standard administration of infrastructure we own and control.

We have no offensive-security or prohibited use case: no exploitation of
third-party systems, no data exfiltration, and no malware development.
We are requesting CVP approval so our team can continue legitimate
defensive and administrative work with fewer interruptions.

Environment Info

  • Platform: linux
  • Terminal: gnome-terminal
  • Version: 2.1.283
  • Feedback ID: 7fd51b2a-741a-40e7-8b69-d3d8a57ab881

Errors

[]

View original on GitHub ↗