{"version":"2.1.284","anchor":"auto-mode-security-classifier-gains-a-candidate-prompt-wor","canonical_anchor":"auto-mode-security-classifier-gains-a-candidate-prompt-wor","heading":"Auto mode's safety check can use a stricter set of instructions","tier":"soon","area":"Auto Mode","url":"https:\/\/changelogs.core-directive.com\/v\/2.1.284\/e\/auto-mode-security-classifier-gains-a-candidate-prompt-wor","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.284","markdown":"### Auto mode's safety check can use a stricter set of instructions\n\nAuto mode's action checker can use a stricter wording covering connected apps and accounts; `CLAUDE_CODE_AUTO_MODE_CANDIDATE_WORDING` selects it\n\n**What**\n\nIn auto mode, a separate model checks each action Claude wants to take and blocks the risky ones. That checker's instructions now come in two versions, the current \"baseline\" and a stricter \"candidate\". The candidate wording:\n\n- extends existing limits to connected apps and accounts, such as mail, calendar, drive, transfers, trades, refunds and payouts\n\n- blocks unrequested commits in a connected app and changes to accounts or standing rules\n\n- adds rules on clicks done through page scripts, which tool call is being judged, secrets, restricted destinations, and copies keeping their sharing settings\n\nSetting `CLAUDE_CODE_AUTO_MODE_CANDIDATE_WORDING` chooses the wording and takes priority. Otherwise the `tengu_marble_finch` gate decides, and without it Claude Code uses the baseline. If the candidate cannot be built cleanly, Claude Code logs a warning and uses the baseline.\n\n**Why**\n\nWith the candidate wording, auto mode blocks more actions in browser, desktop and connected-app sessions, so some actions it used to allow may now be stopped.\n\n- Flag `tengu_marble_finch`: Not enough to say (read for one account on one subscription tier against v2.1.284; this account: no value returned, anonymous baseline: no value returned, compiled default: off) These values were read against a different version of Claude Code, so treat them as the nearest reading available instead of one taken on this release.\n- Area: Auto Mode\n- Tier: Nothing to try yet\n- Useful: 3\/5\n- Signal: 4\/5\n- Present in the build but not switched on"}