Human gives Claude Code more control but keeps it on a leash

For developers working with AI, “vibe coding” at this point means babysitting every action or risking letting the model run unchecked. Anthropic says the latest updates to Claude aim to eliminate that option by allowing the AI ​​to determine which actions are safe to perform on its own, albeit with some limitations.

This move reflects broader changes across the industry, as AI tools are increasingly designed to work without human approval. The challenge is to balance speed and control. Too many guardrails can slow things down; too few can make the system dangerous and unpredictable. Anthropic’s new “Auto Mode” is currently in research preview. That is, it can be tested, but it is not yet a finished product. This is the latest attempt to thread that needle.

Automatic mode uses AI safeguards to review each action before it takes place, checking for signs of unsolicited risky behavior or prompt injection. Prompt injection is a type of attack in which malicious instructions are hidden in content processed by an AI, causing it to perform unintended actions. Safe actions continue automatically, but dangerous actions are blocked.

This is essentially an extension of Claude Code’s existing “Allow Dangerous Skip” command, leaving all decision-making to the AI, but with an added layer of safety on top.

This feature is built on a suite of autonomous coding tools from companies like GitHub and OpenAI that can perform tasks on behalf of developers. But we’re taking it a step further by moving the decision about when to ask the user for permission to the AI ​​itself.

Anthropic does not elaborate on the specific criteria the safety layer uses to distinguish between safe and unsafe actions. Developers will need to understand this feature better before it is widely adopted. (TechCrunch has reached out to the company for more information on this.)

Automated mode comes as Anthropic launches Claude Code Review, an automated code reviewer designed to find bugs before they hit your codebase, and Dispatch for Cowork, which allows users to send tasks to an AI agent to handle the work on their behalf.

Automatic mode will be rolled out to enterprise and API users in the next few days. The company says it currently only works with Claude Sonnet 4.6 and Opus 4.6, and recommends using this new feature in “isolated environments,” or environments that limit the potential damage if something goes wrong in a sandboxed setup isolated from production systems.