When an auto-approved remote call is refused, Claude is told to ask you to approve it directly.
What's wrong with this entry?
If this session's automatic check approved a tool call and an unverifiable sender then reported it refused, the model is now told exactly that instead of getting the generic dropped or unverified-refusal message. The follow-up advice is tailored per case, telling the model to re-send the call and ask you to approve it from the terminal or desktop prompt when only a person's approval counts for that tool.
This session's automatic check (not a person) had approved the call
Strings lifted out of the shipped bundle, so the claim above can be checked against them.