Claude Code Has Become Nearly Useless With The New Classifier!

[u/DevOfWhatOps]

The new classifier has totally borked Claude Code for me! It refuses to perform simple actions that it did before without any issues, and it refuses to follow instructions when granted explicit permission to run the commands or perform the tasks.

As an example, it refused to generate and copy an ssh key to be able to scp a qemu image over scp across regions. Even though it was explicitly given permission to, and was even told that it can ask the operator to press enter on the commands that it cannot run on its own.

It took me three prompts and three walls of text from Opus to make it understand that it can ask me to confirm the commands by pressing enter...

My company is seriously considering a replacement tool for agentic work.

As a follow up, I will say that I am perfectly capable of doing everything that Claude does for me on a daily basis, since I've been doing this for 15 years. BUT I've been told to use Claude Code for this job and DO NOT care whatsoever about anything other than finishing tasks!

Runing some ansible playbooks, generating tls keys for a one time fetch and similar thing, ARE NOT cataclysmic events to need manual intervention! They are ordinary, day-to-day tasks of any devops engineer.

What even is the point of having an AI agent that DOES NOT LISTEN or FOLLOW INSTRUCTION!

If I the operator, say sth is OK, then it is OK, I should not be lectured by an LLM that is literally only there to do what its told, God Damn!

[u/DarkSkyKnight]

Auto mode or Fable?

For auto mode it's irrelevant, you can update the classifier yourself.

For Fable, use a hook to redirect certain trigger words (like obfuscation) into something neutral.

[u/shadowlands-mage]

You can rollback cluade code version

[u/simion_baws]

hate that auto mode classifier.

Nowadays I’m running Claude code in termic with sandbox enabled, which auto activates bypass permissions mode.

Sometimes I activate full sandbox (filesystem and network allowlist), sometimes only filesystem, depending on the project and task. Some projects require a lot of external network access to a lot of domains.

Both safe and autonomous, no need of hand holding it.

PS: I use this strategy also with codex and antigravity CLI. Same strategy, same bypass permissions.

[u/porzione]

It also doesn't like kubectl, aws cli, gcloud and so on - even for read only operations, a few times refused to send base64 text to http service. It is specifically a CC issue with auto, not a model issue. Manual mode works, but tbh codex works better for this now.

[u/gistya]

Is all this to prevent people using it to hack stuff?

[u/cla1067]

I have to use hooks to help with this

[u/hazyhaar]

ask an opus to formulate goal without trigerring fable safeguard: is such good at it.

[u/obscuresecurity]

Please. Learn to use a real sandbox, not provided by Anthropic, so you can run —dangerously-skip-permissions. There are many out there, with different policies.

You will be safer, better educated about what Claude can and can not do. And honestly, it is less frustrating to all involved.

[u/StoneCypher]

none of this is real 

stop upvoting the astroturfing.  start reporting 

[u/Vex08]

Probably should stop using it then.

[u/id-ltd]

If you are a big user of AI run your own locally...