# AI-Safety

Meta engineer Summer Yue let OpenClaw manage her inbox until context compaction dropped the wait-for-approval rule and triggered mass deletion. The lesson: safety constraints cannot live in chat history; they need infrastructure like proxy filter chains.

Anthropic ships Claude Code auto mode, a model-based classifier between manual approvals and skip-all-permissions. The post explains its architecture, threat model, two-stage classifier, and the honest 17% false negative rate.