grumblemumble

A teardown of Claude Code's auto-mode safety classifier, looking at the undocumented ruleset that interprets user consent.

I'm curious about the performance tax of deep packet inspection on these calls. Is this an eBPF implementation or a local proxy? Moving "guardrails" from code to infra feels like the right architectural shift, provided the latency doesn't kill the agent's UX.

can this automatically detect and kill anomalous agents?