A teardown of Claude Code's auto-mode safety classifier, looking at the undocumented ruleset that interprets user consent.