Auto Mode

Claude Code's Auto Mode Check Rides Inside Your Request

Claude Code 2.1.319 (6 November) runs auto mode's safety check inline. I captured the traffic: each agentic turn carries a safeguards block on the normal inference request, and the verdict comes back inside the same response's message_delta, not from a separate classifier call. That block ships the server your working directory, home directory, and the exact launch command. The same release removed the fallback to the built-in classifier when telemetry or feature flags are off or you sit behind an LLM gateway, so a proxy that buffers or rewrites the stream causes a denial, and claude -p now exits 1 where it used to exit 0.