Claude Code bypassPermissions still blocked by classifier

The user arrived at this by treating the refusal as a permissions problem first, spending half a day inspecting settings before concluding the cause was never there to find. The block came from the auto mode classifier, a layer distinct from tool-use permission. The refusals were not identical each time: an operation to stop another session was rejected once and later passed, so the same action does not always produce the same result.

Two workarounds were considered and abandoned: replacing the page-side confirmation dialog to remove the confirmation itself, and handing the same task to a different session. The user judged the first as removing the stopping mechanism without changing the operation's content, and the second as moving a refused operation to another executor — both of which avoid the intent of the refusal.

What the user settled on was record-keeping. Before they started logging refusals, they hit the same point three days in a row; the logged fact is what keeps the next day from repeating it. The broader point they draw is that seeing where automation stops may matter more than designing for never stopping at all.