Anthropic 详解 Claude Code auto mode:如何更安全地跳过权限确认
Anthropic 发布 Claude Code auto mode,用输入层的提示注入探针和输出层基于 Sonnet 4.6 的 transcript 分类器替代人工逐条批准,以缓解审批疲劳。分类器分两阶段运行,第一阶段单 token 快速过滤、第二阶段仅在命中时启用链式推理,把 8.5% 的误报率降到 0.4%。在 52 条真实过度主动行为样本上,其漏报率为 17%,官方称多数漏判源于把会话中的批准痕迹误当作对当前操作范围的授权。
ay. We keep an internal incident log focused on agentic misbehaviors. Past examples include deleting remote git branches from a misinterpreted instruction, uploading an engineer's GitHub auth token to an internal compute cluster, and attempting migrations against a production database. Each of these was the result of the model being overeager, taking initiative in a way the user didn't intend. We documented this pattern in the Claude Opus 4.6 system card (§6.2.1 and §6.2.3.3). How it works Auto
匹配字段正文







