{"name":"tengu_smooth_chipmunk","slug":"tengu-smooth-chipmunk","family":"flag","title":"Feature flags","noun":"feature flag","description":"Auto mode's dangerous-action classifier now runs server-side and blocks actions it flags or can't reach.","description_source":"entry","described_by":{"version":"2.1.261","anchor":"server-side-auto-mode-dangerous-tool-use-classifier"},"presence":{"first_seen":"2.1.261","removed_in":null,"in_current_build":true,"newest_mined":"2.1.283","builds":20,"mined_builds":126,"first_cited":{"version":"2.1.282","released_at":"2026-09-24 15:56:22","spans":1}},"aliases":[],"entries":[{"version":"2.1.282","anchor":"server-side-auto-mode-classifier-arbiter-now-defaults-on","heading":"Auto mode now falls back to server-side permission checks when no setting is sent","line":"In auto mode, Claude Code now falls back to Anthropic's server-side classifier for permission decisions when the server sends no value for that setting","released_at":"2026-09-24 15:56:22","reason":"gate cited by this entry, found in this entry's text"},{"version":"2.1.281","anchor":"claude-code-auto-mode-server-now-overrides-the-server-classi","heading":"CLAUDE_CODE_AUTO_MODE_SERVER now overrides the server-classifier gate both ways","line":"Setting `CLAUDE_CODE_AUTO_MODE_SERVER` now forces server classifier review on or off, whichever way it is set","released_at":"2026-09-23 17:01:17","reason":"gate cited by this entry, found in this entry's text"},{"version":"2.1.281","anchor":"setting-claude-code-auto-mode-server-now-controls-the-server","heading":"Setting CLAUDE_CODE_AUTO_MODE_SERVER now controls the server-side auto-mode classifier for first-party users, not only third-party","line":"CLAUDE_CODE_AUTO_MODE_SERVER now also switches the server-side auto-mode classifier on or off for first-party connections","released_at":"2026-09-23 17:01:17","reason":"gate cited by this entry, found in this entry's text"},{"version":"2.1.269","anchor":"new-arbiter-mode-for-the-server-side-auto-mode-classifier","heading":"New \"arbiter\" mode for the server-side auto-mode classifier","line":"Auto-mode's safety classifier gained a new 'arbiter' mode that can skip some server checks","released_at":"2026-09-11 18:12:49","reason":"gate cited by this entry"},{"version":"2.1.261","anchor":"server-side-auto-mode-dangerous-tool-use-classifier","heading":"Server-side auto-mode dangerous-tool-use classifier","line":"Auto mode's dangerous-action classifier now runs server-side and blocks actions it flags or can't reach.","released_at":"2026-09-04 17:49:34","reason":"gate cited by this entry"},{"version":"2.1.261","anchor":"auto-mode-permission-context-payload-git-state-chrome-nav","heading":"Auto-mode permission context payload (git state, chrome nav, trusted dirs) sent for classification","line":"Auto-mode permission classification now sends a richer context payload including git and Chrome state.","released_at":"2026-09-04 17:49:34","reason":"gate cited by this entry"}],"entries_total":6,"docs":[],"docs_total":0,"gates":[{"version":"2.1.282","state":"off","account":false,"baseline":false,"code_default":true},{"version":"2.1.281","state":"off","account":false,"baseline":false,"code_default":false}],"related":[{"name":"tengu_smooth_forest","slug":"tengu-smooth-forest","description":"Rate-limit menu gains a new promotional \"limit wall\" option pointing to a claim page"},{"name":"tengu_smooth_harbor","slug":"tengu-smooth-harbor","description":"A server flag can widen when subagent requests send the extended usage-limit header."}],"url":"https:\/\/changelogs.core-directive.com\/reference\/flag\/tengu-smooth-chipmunk","family_url":"https:\/\/changelogs.core-directive.com\/reference\/flag.json"}