Unclear It is not clear what decides when the safety check may approve asks meant for a person.
What
A permission ask is when Claude stops to check whether it may use a tool. Some asks were marked person-only, meaning a person always had to answer. A new flag, classifierMayAllow, loosens that.
- When a person-only ask has
classifierMayAllowset, the forced prompt is skipped. The classifier is the automatic checker auto mode uses to decide whether an action is safe, and it can now settle that ask. - The permission ask for uploading files through MCP tools can set
classifierMayAllow. MCP is the standard Claude Code uses to talk to add-on tools. - When an ask rule matches, the decision already made is kept and tagged with
matchedAskRule, unless its reason is itself a rule. - Rejected file inputs to MCP tools are now recorded.
- File uploads in Chrome use a different permission check that can fail with its own error.
- A header check for Toolbox MCP is skipped in one other mode.
Why
In auto mode you may see fewer upload prompts, because the classifier can now approve some asks that always waited for you before. If you count on being asked before uploads, expect this to change.
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubt
It is not clear what decides when the safety check may approve asks meant for a person.