In the June 2026 wave (≈ 2.1.161–2.1.167) this false-positive poisons the whole session: once it fires, even "hi" gets blocked. The single thing that decides whether you can fix it yourself is where the state lives. Three questions and one test sort that out.
git worktree status, even "hi" — turns with zero security content. So rephrasing or sanitizing your prompts will not help, and "what did I say wrong" is the wrong question. The right question is the one below.
npx cc-safe-setup)
This page describes user reports and operator-side steps; it is not account or legal advice. For Usage Policy questions, confirm against Anthropic's own documentation and support. Reproductions referenced: anthropics/claude-code #65866, #65846, #65867, #65873.