Your agent's safety check now runs a model call per command

Claude Code v2.1.283 made auto mode the default, so your approval prompt became the fallback. What replaced it is a Sonnet 5 classifier, and on some plans it is billed per shell command.