Claude Code defaults to Auto Mode—why human approval often becomes rubber-stamping

为什么人工确认常常只是盖章仪式？从 Claude Code 实测看 AI 时代的控制面迁移

Anthropic will make Auto Mode the default for new Claude Code sessions starting Aug 14, replacing per-command approval prompts with a runtime classifier that judges tool-call risk. In a blind test with 1,053 professional users, humans caught only 13.6% of dangerous commands slipped into sessions; the classifier caught 89%. Usage data shows a 97% single-command approval rate but a 39% rejection rate for multi-step plans—people scrutinize high-level intent, not every click. The article draws on the Therac-25 accidents, Air France 447, and Bainbridge's Ironies of Automation to argue that frequent confirmations degrade into muscle memory. Three production cases show the classifier blocking a public upload, a mass process kill, and an over-privileged cloud role request. Adversarial testing still shows a 7% miss rate, so Anthropic recommends human review for high-risk production changes.

Why it matters: Anthropic product update + first-person experimental data, all three HKR axes hit. The 13.6% vs 89% interception gap from a 1,053-person blind test is a hard hook; the 97% approval rate and 49.5% self-bypass stats make the 'control illusion' argument land. Score held below 85 ...