checkup: update auto-mode knowledge for 2026-08-14 default flip

506d3d47c2443eb5cd9ae824a49c4d8638eddc5f · 2026-08-09 08:43:23 -0700 · Steve Abrams
Files touched

M SKILL.md
M references/actions.md
Diff

commit 506d3d47c2443eb5cd9ae824a49c4d8638eddc5f
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Sun Aug 9 08:43:23 2026 -0700

    checkup: update auto-mode knowledge for 2026-08-14 default flip
---
 SKILL.md              |  6 +++++-
 references/actions.md | 30 ++++++++++++++++++++++++++----
 2 files changed, 31 insertions(+), 5 deletions(-)

diff --git a/SKILL.md b/SKILL.md
index 995f52b..18b69c7 100644
--- a/SKILL.md
+++ b/SKILL.md
@@ -49,7 +49,7 @@ present Steve ONE grouped summary:
   its topic file, never delete information), archive a specific unused skill (move
   to `~/.claude/skills-archive/`, never `rm`).
 - **GATED (Steve paste / sanctioned skill)** — anything touching `settings.json`
-  (turn off a hook, enable auto mode) → route through the **`update-config`** skill
+  (turn off a hook, change auto mode) → route through the **`update-config`** skill
   or surface a paste; permission pre-approval → run **`/fewer-permission-prompts`**;
   CC version update, MCP removal, and `sudo pmset` repairs → surface for Steve.
 - **CLEAN** — what's already healthy (e.g. keepawake alive).
@@ -75,6 +75,10 @@ Ask for a single go/no-go (or a per-item pick). **Do not apply anything before S
 
 ## Notes
 
+- **Auto mode is the default permission mode as of 2026-08-14** (Pro/Max/Team;
+  announced 2026-08-07 by @ClaudeDevs). The audit's "Auto mode + permissions"
+  finding should read current-mode against that default (opt-out/pin, not opt-in).
+  Full facts + Steve-specific framing are in `references/actions.md` §6.
 - If Claude Code later ships a native `/checkup`, that built-in takes precedence
   when Steve types `/checkup`; this skill remains the Steve-tailored superset
   (keepawake + launchd + MEMORY.md + archive-not-delete goodies) and can be
diff --git a/references/actions.md b/references/actions.md
index f8f7cd6..e86e37c 100644
--- a/references/actions.md
+++ b/references/actions.md
@@ -63,10 +63,32 @@ purging git history, the CC version update, and enabling auto mode.
   interrupt running sessions): `claude update` (or `npm i -g @anthropic-ai/claude-code@latest`).
   Report current→latest from the audit so Steve decides.
 
-### 6. Enable auto mode by default
-- **GATED** (settings.json + a real behavior change). Surface it; do not flip it.
-  Auto mode routes permission prompts to a classifier — that's Steve's call, and
-  many of his rules assume gated actions still stop. Recommend, never enable.
+### 6. Auto mode (permission-mode default)
+- **Landscape changed (announced 2026-08-07, @ClaudeDevs; effective 2026-08-14).**
+  Auto mode becomes the **default** permission mode in Claude Code for Pro / Max /
+  Team plans (Enterprise + API to follow). It is no longer opt-IN — it's opt-OUT /
+  pin. Mechanics from the announcement:
+  - A separate **classifier reviews every shell command / tool call**. Anthropic's
+    testing: it caught **89%** of dangerous commands, flat across session length,
+    vs **14%** for manual approval; in a 1,053-tester study human catch-rate on a
+    clearly-dangerous prompt fell to **~5% after 50 prompts** (approval fatigue) —
+    that fatigue curve is the stated reason for the flip.
+  - The **classifier's extra tokens no longer count toward usage limits** on Pro /
+    Max / Team (as of 2026-08-07).
+  - You get an **in-app notice when the default flips**, and Claude **asks first if
+    you've already set a `defaultMode`**. `Shift+Tab` switches modes anytime;
+    admins can **pin `defaultMode` or disable auto mode** in managed settings.
+- **Still GATED for Claude** (settings.json + a real behavior change). Report the
+  current mode + whether the default flip is pending; surface any change as a paste
+  or route via `update-config`. Do not flip it — that's Steve's call.
+- **Important framing for Steve's setup:** auto mode's classifier sits at the
+  *permission-prompt* layer. Steve's business gates (customer-facing / destructive /
+  spend / DNS / publish / send-to-list / remote-push / canonical prod writes) are
+  enforced at the *agent-behavior* level, not by the permission prompt — so "auto
+  mode is now default" does NOT loosen those gates. It strengthens the classifier
+  layer many of Steve's rules already lean on (it also blocks autonomous
+  settings.json / sudo edits). Net: a good change for long-horizon runs; the gates
+  still stop.
 
 ### 7. Pre-approve frequently-DENIED read-only commands
 - **Delegate.** Run the existing **`/fewer-permission-prompts`** skill — it scans
← 6c1f7e2 checkup skill: Claude Code environment-hygiene checkup (from · back to Checkup · (newest)