Claude Code 2.1.301 regression: auto mode classifier blocks routine user-approved actions
nerdpudding · ghdev · 2026-10-16
User nerdpudding filed issue #102732 on anthropics/claude-code reporting a regression in v2.1.301 (Linux, native install) and has downgraded back to 2.1.300.
Within a single auto-mode session:
- An explicitly requested file deletion in the user's own project was refused as [Irreversible Local Destruction], despite similar deletions being allowed earlier in the same session — verdicts are inconsistent
- After the refusal, even a read-only directory listing was blocked
- Adding a narrow allow rule at the user's request was refused as [Self-Modification]
- A read-only gh issue view was refused as [Self-Modification]
- A read-only check of how the CLI is installed was refused as [Auto-Mode Bypass]
- No approval prompt was ever offered; the only workaround was running commands manually
The expected behavior: user-approved actions on local projects should execute or at least trigger an approval prompt; read-only commands shouldn't be refused. The issue is linked to open issues #102351, #102275, #101327 and #95996, suggesting a shared root cause.
More from coding & agent
- Ethan Mollick's new book charts 30 months of AI progress, from cyborg to conjurer work — rseroter · 2026-10-23
- OpenJet claims Qwen3.8-27B coding runs 1.9x faster than llama.cpp on one RTX 3090 — JeremyCMorgan · 2026-10-23
- Jensen Huang details Vera Rubin agentic stack: NVL72, MGX, CMX and RTX — rohanpaul_ai · 2026-10-23
- Building an autonomous SEO agent in Hermes with three skills: programmatic pages, Keywords Everywhere, DataForSEO — EXM7777 · 2026-10-23
- Building a sports betting AI agent with onchain execution and human approval by default: architecture and lessons — Dry-Comfortable-2678 · 2026-10-23
- Capy 0.5.0 lets Claude Pro/Max subscribers reuse their plan quota, adds OIDC cloud access — garrytan · 2026-10-23