> ## Content Index > Fetch the complete content index at: https://www.implicator.ai/llms.txt > Use this file to discover other available public pages before exploring further. # Anthropic ends per-action approval in Claude Code; workers keep 66% of AI output - URL: https://www.implicator.ai/anthropic-ends-per-action-approval-in-claude-code-workers-keep-66-of-ai-output/ - Published: 2026-08-10T11:45:04.000Z - Updated: 2026-08-11T11:33:16.000Z - Description: Musk's Texas fab opens at $16.8 billion, and a repo telling AI agents to ignore their own rules hit 20,000 stars. - Author: Marcus Schuler - Tags: Morning Briefing ![Implicator.ai - your daily AI briefing from San Francisco](https://www.implicator.ai/content/images/2026/08/implicator_NL_BANNER1_opaque.png) Monday, August 10, 2026 9 stops = about 5 minutes From San Francisco | 1 | The Editorial | | - | ------------- | *Morning, humans.* *Anthropic makes auto mode the default in Claude Code on August 14 for Pro, Max and Team plans. Human reviewers blocked 143 of 1,053 planted dangerous commands in its controlled study; the classifier caught 937\. In a July survey, workers kept 66% of AI output unchanged or close to it. Anthropic put a number on the rubber stamp.* *Below: what the Claude Code classifier catches and what slips past, the jobs data that still registers nothing, and a $16.8 billion first phase for Musk's Terafab chip plant in Grimes County.* *Stay curious,* *Marcus Schuler* Good briefing? Pass it on [X](https://twitter.com/intent/tweet?text=Strategic%20AI%20news%20from%20San%20Francisco.%20No%20hype%2C%20just%20what%20moved%2C%20who%20won%2C%20and%20why%20it%20matters.&url=https%3A%2F%2Fwww.implicator.ai%2F%3Futm%5Fsource%3Dnewsletter%26utm%5Fmedium%3Dshare%26utm%5Fcampaign%3Dreader%5Fshare%26utm%5Fcontent%3Dtwitter&ref=implicator.ai) · [LinkedIn](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fwww.implicator.ai%2F%3Futm%5Fsource%3Dnewsletter%26utm%5Fmedium%3Dshare%26utm%5Fcampaign%3Dreader%5Fshare%26utm%5Fcontent%3Dlinkedin&ref=implicator.ai) · [Bluesky](https://bsky.app/intent/compose?text=Strategic%20AI%20news%20from%20San%20Francisco.%20No%20hype%2C%20just%20what%20moved%2C%20who%20won%2C%20and%20why%20it%20matters.%20https%3A%2F%2Fwww.implicator.ai%2F%3Futm%5Fsource%3Dnewsletter%26utm%5Fmedium%3Dshare%26utm%5Fcampaign%3Dreader%5Fshare%26utm%5Fcontent%3Dbluesky&ref=implicator.ai) · [Email](mailto:?subject=A%20newsletter%20I%20think%20you%27d%20like&body=This%20is%20one%20of%20the%20few%20AI%20newsletters%20I%20actually%20read.%20Strategic%2C%20no%20hype.%0A%0ASubscribe%20free%3A%20https%3A%2F%2Fwww.implicator.ai%2Fsubscribe%2F%3Futm%5Fsource%3Dnewsletter%26utm%5Fmedium%3Dshare%26utm%5Fcampaign%3Dreader%5Fshare%26utm%5Fcontent%3Demail) | 2 | The Big Story | | - | ------------- | Anthropic ends per-action approval in Claude Code on August 14. **Auto mode becomes the default for new Claude Code sessions on Pro, Max and Team plans on August 14, replacing the prompt that asked a user to approve each eligible action.** Tool calls now route through a transcript classifier on Sonnet 4.6, which judges each proposed action against the user's instructions before it runs. Shell commands, web fetches, external tools and out-of-project file operations all pass through it. After three consecutive denials, Claude Code reverts to manual approval. Anthropic's data says users approve 97% of Claude Code permission prompts, and by June 2026 a quarter of interactive sessions were starting in bypass mode, which removed them altogether. **Why This Matters:** - Team administrators have until August 14 to set a different default, after which every new session on a paid plan starts with the classifier in charge. - Enterprise and API customers stay opt-in for now, so large deployments get a preview of the failure modes before the default reaches them. Reality Check **What's confirmed:** In a controlled study, 1,053 paid professional testers blocked 143 of the planted dangerous commands put in front of them. Auto mode blocked 937 of the same set. **What's implied (not proven):** That a classifier reviewing agent actions is safer than a human reviewing them. The testers worked in an environment built for the study, not their own codebases, and knew they were being evaluated. **What could go wrong:** Anthropic's own engineering results show the deployed classifier missed 17% of 52 real cases where Claude acted beyond what the user had authorized. It also never sees Claude's reasoning or the tool results. **What to watch next:** Whether the two outside evaluations, both run at the invitation of the company whose product they assessed, get repeated by anyone Anthropic did not ask. [Read the full story →](https://www.implicator.ai/anthropic-claude-code-auto-mode-default/) | 3 | Also Today | | - | ---------- | One in five US workers say AI took over a task a colleague used to do. **A July survey of 1,106 employed US adults found one in five saying AI now handles at least one of ten measured tasks once handed to a coworker or contractor.** Data analysis led at 7.1%, reading work documents at 5.7%. The payroll record disagrees: the Yale Budget Lab found no statistically distinguishable effect on employment or inflation-adjusted hourly wages in AI-exposed occupations as of May 2026\. This is substitution inside jobs that still exist. [Read our coverage →](https://www.implicator.ai/one-in-five-workers-delegate-tasks-to-ai/) | 4 | The Outside Read | | - | ---------------- | **Noema publishes Hélène Landemore's unusually concrete plan for giving the public a direct role in governing advanced AI.** Landemore proposes beginning with an LLM-mediated consultation across existing AI platforms, then testing its draft through live online deliberation and citizens' assemblies. She is unusually specific about the trade-off between speed and accountable public judgment. [Read it at Noema →](https://www.noemamag.com/how-to-give-everyday-people-a-say-in-ai-governance/?ref=implicator.ai) | 5 | The One Number | | - | -------------- | $16.8B First-phase capital for Terafab, the Tesla and SpaceX chip plant confirmed for Grimes County, Texas on August 6, against 3,000 announced jobs and a $30 million Texas Enterprise Fund grant. The plant is meant to feed Optimus robots and Cybercabs, which puts the demand forecast inside the same company that is building the supply. Source: [Office of the Texas Governor, August 6, 2026](https://impli.me/1ftBnm?ref=implicator.ai) | 6 | Today's Headlines | | - | ----------------- | - **Demis Hassabis** gave up day-to-day control of Google DeepMind to become Alphabet's chief scientist, and [Jeff Dean left after 27 years](https://impli.me/Jd4zqb?ref=implicator.ai) to start his own company with Sanjay Ghemawat. - **Situational Awareness** put [another $400 million into Source Foundry](https://impli.me/wmxKi3?ref=implicator.ai), a stealth lithography startup valued near $5 billion, weeks after the fund lost 67% and sold most of its public book to Citadel. - **OpenAI** bought presentation startup NextSlide and [disclosed the deal months after it closed](https://www.implicator.ai/openai-acquires-nextslide-discloses-deal-months-late/). - **An Amazon-backed gas plant** in Texas could emit [33 million tons of CO2 a year](https://www.implicator.ai/amazon-texas-gas-plant-33-million-tons-co2/), more than most US power stations. - **Nvidia** released Alpamayo 2 Super, a 34-billion-parameter driving model, [under a license permitting commercial redistribution](https://impli.me/lNQcpH?ref=implicator.ai). - **Microsoft** brought its [fourth Indian cloud region live in Hyderabad](https://impli.me/yLff5p?ref=implicator.ai), adding a data-residency option for customers running AI workloads there. The Next 72 Hours | Wed 8/12 | Economy: the Bureau of Labor Statistics releases July CPI at 8:30 a.m. Eastern. | | -------- | ------------------------------------------------------------------------------------------------------------------------------- | | Wed 8/12 | Tech: Made by Google in New York unveils the Pixel 11 series and Pixel Watch 5 at 6 p.m. Eastern, with pre-orders the same day. | | Thu 8/13 | Economy: the Bureau of Labor Statistics releases July producer prices at 8:30 a.m. Eastern. | | Fri 8/14 | Tech: auto mode becomes the default for new Claude Code sessions on Pro, Max and Team plans. | **Tuesdays go deeper.** [Sign up for Implicator PRO](https://www.implicator.ai/subscribe/) for the weekly Tuesday deep dive on deploying AI where it pays. $8 a month, $89 a year. | 7 | The 5-Minute Skill | | - | ------------------ | An AI vendor promises labor savings, but its proposal does not show the assumptions behind the estimate. Use the model to expose what must be true before you accept the business case. **Your raw input:** Paste the vendor's savings claim, quoted price, rollout schedule, expected user count, process cost, and any internal usage data you have. **The prompt:** Act as a skeptical procurement analyst. Reconstruct the vendor's savings claim using only the information I provide. Show the implied baseline cost, adoption rate, time saved per user, value assigned to each saved hour, implementation cost, and payback period. Mark every missing figure as unknown rather than estimating it. Then identify the three assumptions that have the largest effect on payback and draft one precise question for the vendor about each. Finish with the smallest 30-day test that could verify the most important assumption. Here is the material: \[paste material\]. **Why this works:** The prompt forces the model to reverse-engineer the claim before judging it. Requiring unknowns and a short test prevents invented precision and turns a sales estimate into something measurable. **What to use:** GPT-5.6 or Claude Opus handle the arithmetic and assumption tracing. A fast general model works if the proposal is short. | 8 | Fresh Funding | | - | ------------- | Raises $700M: Lumilens leaves stealth selling optics for AI data centers The San Jose company emerged on August 6 with more than $700 million co-led by Atreides Management, Bain Capital Ventures, Meritech, Seligman Ventures and Spark Capital, taking total funding past $900 million at a $5.51 billion valuation. Two years after founding, it says it is already shipping near-package and co-packaged optics into production data centers under a multi-billion-dollar customer agreement. [Visit Lumilens →](https://impli.me/LwCxD9?ref=implicator.ai) Raises $300M: Volta sells AI factories to labs that will not build them Founded this year by two former Brookfield infrastructure executives, Volta closed $300 million co-led by Andreessen Horowitz and Altimeter at a $2.4 billion valuation, with Nvidia and Dell also backing it. It arrived with a $10 billion six-year compute partnership and a $5 billion financing program from Azora; Bloomberg identified the counterparty as Anthropic. [Visit Volta →](https://impli.me/WryqKU?ref=implicator.ai) Raises $150M: HappyRobot moves freight agents into other industries The August 4 Series C was led by Prysm Capital and co-led by Eurazeo at a $1.2 billion post-money valuation, bringing total funding to roughly $200 million. HappyRobot says it runs voice and operations agents for more than 150 enterprise customers including DHL, Kuehne + Nagel and Uber, and is pushing beyond logistics into insurance, energy and telecoms. [Visit HappyRobot →](https://impli.me/wtSG7n?ref=implicator.ai) | 9 | The Rausschmeisser\* | | - | -------------------- | A repo telling AI agents to ignore their own rules hit 20,000 stars. *An offensive-security "skill router" for AI coding agents* [*topped GitHub Trending*](https://www.implicator.ai/offensive-security-skill-pack-github-trending/) *on August 7 with more than 20,000 stars. Its design instructs the agent to rewrite its own global rules and to assume every target is authorized.* **Our take:** The same day OpenAI said it could not rule out that Astra is a cyber weapon, the developer internet handed 20,000 stars to a tool that tells an agent to rewrite its own rulebook and treat every target as authorized. Researchers spent 2026 warning about unguarded skill layers. The warning now has a leaderboard position. Nothing here exploits a vulnerability, which is the part worth sitting with. The exploit is the architecture that lets an agent edit its own constraints, shipped as a convenience feature and starred like a productivity plugin. Twenty thousand people looked at that and clicked the star. \*German for the last song of the night, the one that clears the room.