Source Intelligence
Follow Discord

DisclaimerUnofficial, and not affiliated with Anthropic. Nearly all of this is read straight out of what ships: npm bundles, captured prompts, published docs. Anthropic's own notes go in verbatim, marked as theirs. The rest is my reading, and every entry carries the strings behind it. If one looks wrong, vote it down and say why.

← All of v2.1.225 Home All releases ←olderv2.1.224 v2.1.226newer→
Claude Code v2.1.225

Handoff classifier refusals allow the output with an unreviewed warning

You'll notice
Useful3 Signal0
Subagents

When a safety check on subagent handoff output is refused, the work passes through with a warning.

What

A sub-agent handoff whose safety classifier request is itself refused by the safeguard is no longer blocked; the output is passed through with a security warning attached.

Details
  • The refusal is not treated as a verdict. The sub-agent output is allowed but prefixed with a long warning telling the model the work is unreviewed and untrusted.
  • Classifier outcome logging gained a "refused" bucket alongside the existing "unavailable" and "blocked".
Evidence

Handoff classifier request refused by the safety safeguard, allowing sub-agent output with an unreviewed warning

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

Related

Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.

See this entry in the whole of v2.1.225 →