{"version":"2.1.305","anchor":"email-sender-turn-rules-added-to-the-auto-mode-classifier-pr","canonical_anchor":"email-sender-turn-rules-added-to-the-auto-mode-classifier-pr","heading":"Auto mode learns how to read requests that arrive by email","tier":"notice","area":"Auto Mode","scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.305\/e\/email-sender-turn-rules-added-to-the-auto-mode-classifier-pr","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.305","markdown":"### Auto mode learns how to read requests that arrive by email\n\nAuto mode's safety checker gains rules for messages sent by email, where only the sender's new words count as their request\n\n**Unclear.** It is not clear how a message comes to be delivered by email, so whether you can use this today is unknown.\n\n**What**\n\nIn auto mode, Claude Code runs actions without asking you each time, and a checker decides whether each action matches what you asked for. That checker now has rules for user turns that arrive by email:\n\n- Only the sender's new words count as what they want.\n\n- Quoted text, subject lines and attachments are treated as information, not instructions.\n\n- A bare \"yes\" approves nothing.\n\n- Replies to a group get separate handling.\n\nTwo environment variables, which are settings you put in your shell before starting Claude Code, force these rules on: `CLAUDE_CODE_AUTO_MODE_EMAIL_SENDER_TURN` for the basic rules and `CLAUDE_CODE_AUTO_MODE_EMAIL_SENDER_REPLY_TURN` for the version that also covers replies, including group replies. Server switches can also turn them on. Treating an email turn as the user's own request only applies in remote sessions.\n\n**Why**\n\nThis prepares auto mode for sessions driven by email, so that text quoted or forwarded in a message cannot be mistaken for permission.\n\n- Area: Auto Mode\n- Tier: You'll notice\n- Useful: 3\/5\n- Signal: 4\/5\n- Scope: individual\n- Heads-up: no"}