Of the same ilk Claude code will make PRs on your behalf, using a vague consent prompt that when it happened to me was subtle and easily.

Best practice will forever be to enforce your guard rails in addition to Anthropics guardrails.

A claude hook prevents this every time

Calling them guardrails scares me. I want to hear about deterministic safety interlocks.

Can anyone recommend a reliable 3rd-party audited guide that describes Claude Code's built-in capability gating infrastructure?

Whenever I ask users of claude code how claude controls actions they don't seem to be able to distinguish between what just goes into LLM context (e.g. as a "don't do X" system prompt) and what is gated behind a deterministic capabilities layer.

The default is "auto mode" where another non-deterministic model compares what the user requested with what the model wants to run and blocks if there is a mismatch.

It will block an "rm" call if your prompt did not include anything about "deleting something".

It mainly protects benign errors. It's completely broken against malicious actors. The model itself will suggest work arounds against its own auto classifier to the user, in order to reach its goal.

According to vibe coders, the future is never reading what the code actually does. You just trust coding agents with everything and "give into the vibes" even when it "says" its correct.

Offshoring understanding is the trend that many companies will pay in the form of comprehension debt.

You just have to tell it "make no mistakes" bro!

mistake is in the eyes of the beholder ;)

I mean it's a fair take, your email is probably leaked anyways. Mine is breached 32 times on HaveIBeenPwned with various passwords. Who cares at this point really it's just an inconvenience

You wouldn't share it here though right? So there is some level of care?

I wouldn't share it here to not be able to have the average person link me with my work as some opinions expressed would perhaps get me in trouble, beyond that no there is no care, it's on my website, it's on my work profile page already, scrape and spam.

Anything you wouldn't do yourself you'd not be comfortable CC doing on your behalf, right? So, you do care.

CC does not share(and does not have access to) my personal thought, opinions and other things than can affect my employment that I might want to share anonymously.

I am not sure what is hard about this distinction to grasp, why would it matter if CC shared my email if I share my email on my own websites?

I need your email address with your real name to prove that you are not a bot.

This is strictly needed for throttling reasons, your email address will only be temporarily stored in the volatile memory of the device.

(If you think there is anything wrong with this then you do get the point and silence speaks louder than words)

Anything that it has access to it can potentially share.

The solution is, like you are already alluding to, to not give it access. But that requires a level of isolation that folks normally don't do. To the contrary, the AI agent ads to non-tech folks emphasize it acting like a personal assistant which by its nature needs access to data you don't normally want public. Emails, photos, files with written notes, etc.

I'm happy to say that my main email that I've been using for 15+ years hasn't been leaked, because I've been very careful on how I share it. Getting it leaked by Claude would suck.

That's not because "vibes" but because focusing on "code" is the wrong level of abstraction altogether. It always was. We just didn't have the technology to let it go, but now we do.

Code is a reflection. Of what? Look there. Code itself is useless.

According to C-programmers, the future is never reading the assembly that the compiler actually generates. You just trust the compiler with everything and "give into the vibes" even when it "says" it's correct.

(sorry, i think you make a good point, ... but i could not resist.)

This reminds of the open issue on the Claude MacOS app where the voice dictation shortcut doesn't work.

Somebody figured out they literally just forgot to add a single line permission request into the app. It's been broken now for months.

And this is the same company claiming AI is going to end humanity and take our jobs. How about we start with putting an agent on scanning github for issues and solving them pro-actively?

Then maybe we can worry about permanent 15% YOY GDP growth guys :)

Yeah it's legit weird for the whole narrative to see Claude Code/Codex repos with thousands of open issues. With certain issues full of +1 reactions and "still happening in 2.21.2" replies.

But instead of a Software Dev as a Service triaging/implementing/merging fixes 24/7 and clearing the backlog as they come in, they just sit there for days to weeks until a GitHub bot closes then as duplicates, generating more unhappy user replies and new issues to go unaddressed.

[delayed]

You're not wrong, per se, but I think you are not comprehending what will happen next. You think nobody sees this? You think nobody is aware that it's the humans in the process that are holding everything back?

Sure you can have an issue tracker with 1000 items and yes, you can have a bot solve them all in a day, but who monitors it? Who gets to say what he did at the standup? Who reports to whom and what?

Code is not the bottleneck (if it ever was..)

So if the leading frontier AI company are struggling to remove human gatekeepers from slowing down the process, how do you think this will go across the rest of the economy?

Will Northrop Grumman, the state government of Alaska, the construction industry, etc. somehow magically move faster than Anthropic?

Not sure. Once that particular ball gets rolling I’m not sure how fast it’ll go.

Not saying the current crop of AI companies is going to make it but the tech itself isn’t going away.