Claude Code will stop asking permission by default from 14 August — because humans catch 14% of dangerous commands and the classifier catches 89%

From 14 August 2026, Anthropic is switching Claude Code's default from repeated approval prompts to 'auto mode', a classifier that screens tool calls for irreversible or destructive actions — a change Anthropic says is justified by testing showing human reviewers catch only 13.6% of dangerous commands against the classifier's 89%.

Anthropic has announced that Claude Code’s “auto mode” becomes the default permission setting from 14 August 2026 for Pro, Max and Team users, replacing the familiar pattern of approving each tool call individually. In its place, a classifier screens every action Claude Code wants to take for signs it’s irreversible, destructive, or outside the task’s scope, and only interrupts the workflow for those.

The justification is a specific number, not a vague appeal to convenience: in a study of 1,053 paid testers, human reviewers correctly caught only 13.6% of genuinely dangerous commands when asked to approve or reject them — a figure that fell to roughly 5% after the reviewer had already approved 50 prior prompts, the classic pattern of approval fatigue. The auto mode classifier caught 89% of the same dangerous commands in testing. Anthropic is also dropping the token charge for the extra classifier calls, removing the one obvious reason a team might have stayed on manual approval to save cost.

Two things are worth noting alongside the headline change. First, Anthropic is explicit that “classifiers cannot eliminate risk” and still recommends human review before anything reaches production — this is a change to the default review mechanism, not a claim that review is no longer needed. Second, OpenAI has taken the opposite position with GPT-5.6, opting out of an equivalent auto-approval default — a genuine philosophical split between the two labs on how much autonomous execution risk is acceptable by default, not just a feature gap.

So what

If your team runs Claude Code today, this changes your risk posture automatically on 14 August unless someone actively pins the previous manual-approval setting — worth a deliberate decision either way rather than letting the default choose for you. And the underlying data point matters beyond this one product change: it’s a rare, quantified admission that manual human approval of AI-agent actions is measurably worse than it feels, which should inform how any business scopes permissions and guardrails around AI coding tools generally, not just this one setting in this one product. If you want help thinking through where automated AI development genuinely needs a human in the loop and where it doesn’t, see our approach to AI-assisted development or get in touch.

← All research

More research.

GitHub's Copilot impact dashboard now counts chat and VS Code agent use, and drops the 'passive users' label

On 6 November 2026 GitHub added Copilot Chat and the VS Code Agents window to its Copilot impact dashboard, bringing it to nine tracked experiences, and renamed 'Passive users' to 'Chat-first users'.

Read ›

Claude Code 2.1.319: a setting that denies permission prompts so AI agent runs don't stall

Claude Code 2.1.319 (6 November 2026) adds a permissions.denyInsteadOfPrompting setting and moves long MCP tool calls to the background, a sign AI-assisted development is being built for unattended runs.

Read ›

GitHub now reports how often developers act on Copilot code review comments

On 5 November 2026 GitHub added code review metrics, including an addressed rate, to the Copilot usage metrics API. For AI software development buyers, it is the first first-party number for how much AI review feedback is acted on.

Read ›

Dependabot can now keep AI agent skills and prompts up to date

GitHub's Dependabot gained Agent Package Manager (APM) support on 3 November 2026, treating AI agent skills, prompts and instructions as dependencies that need updating like any other software.

Read ›

GitHub Copilot is now inside Xcode's own coding assistant: what iOS app owners should ask

GitHub put Copilot into Xcode's built-in coding assistant on 4 November 2026, in public preview with Xcode 27.3 beta. AI-assisted iOS app development is now a built-in choice of agent, not a plug-in.

Read ›

GitHub's Copilot usage API now separates bring-your-own-key and custom models: AI spend visibility for software buyers

GitHub's Copilot usage metrics API now reports bring-your-own-key (BYOK) and enterprise custom model usage separately, as of 3 November 2026. Teams using AI coding tools can see more of where usage goes.

Read ›

Start a project

Building with AI? Let's talk.

Tell us what you are building. We'll give you an honest view of the right approach.

Start a projectSee our work