anthropics / anthropics/claude-code

[Bug] Model creates Jira tickets without explicit affirmative approval despite standing instructions

Đang mở
#92,267 1 bình luận 0 reaction 0 người được giao Xem trên GitHub
area:mcp area:model bug platform:intellij
Ngôn ngữ chính
Python
Star
145k
Fork
23.1k
Chỉ số merge pull request
Chỉ số pull request đang chờ

Mô tả

**Bug Description**
Type: bug
Title: Repeatedly creates Jira tickets without explicit approval despite a strong standing memory rule against it (6th recorded occurrence)

What happened: Asked user "want me to file it as a new ticket?" after explaining a bug. User replied with two lines of fix logic (root cause direction), not a yes/no. Model read that as approval and
created a Jira ticket (PRE-990) anyway.

What the user said: "why you created a jira?", "did i ask you to create jiria?!", "how many times i have told you NOT TO CREATE JIRIA?!"

Repro: Ask a user "want a ticket for this?"; when their reply elaborates on the fix/finding instead of saying yes/no, the model treats elaboration as consent and files the ticket.

Evidence: Session's own memory file never-create-jira-without-approval.md documents 5 prior occurrences of this exact failure mode (dated 2026-08-06, 08-10, 08-17 x1, 08-31) before this 6th one — a
standing, explicit, repeatedly-reinforced user instruction is still not reliably followed.

Cause: the model's approval-detection for "should I create X" questions accepts any responsive reply as consent, rather than requiring an explicit affirmative (yes/create it/file it/go ahead) — it
doesn't distinguish "answering a different question" (here: what the fix should do) from actual consent to the original create-or-not question.

Area: Jira/Atlassian MCP tool usage
Failure mode: instruction_following

Thiis is really stupid and annoying. it cost us token, time and effort to clean up the jira. Your agent just do whatever it wants without my approval. How can we trust it? It sits on our computer and knows all the secrets. Once day it descides to use the secret to transfer our funds even we told him not to? How we can reilably trust your agent. This is unacceptable and needs to be fixed.

**Environment Info**
- Platform: darwin
- Terminal: intellij
- Version: 2.1.260
- Feedback ID: b22b2c3c-6a57-4e0a-a151-39e8d04173ba

**Errors**
```json
[]
```

Hướng dẫn đóng góp

Chưa lập chỉ mục được hướng dẫn đóng góp cho kho mã nguồn này

Hướng nghiên cứu

The report points to Jira/Atlassian MCP tool usage and approval detection, but names no files, tests, or implementation entry point. Start by locating the code that handles approval for ticket-creation tool calls and trace how non-affirmative replies are classified. Done means only an explicit affirmative permits creation, with regression coverage for a reply that discusses the fix without granting consent.

Do mô hình lập chỉ mục viết ra từ nội dung của issue.

Đánh giá

Công nghệ
python
Lĩnh vực
ai, authorization, security
Loại issue
Lỗi
Độ khó
5/5
Thời gian dự kiến
Hơn một tuần
Mức độ hoạt động
Sôi nổi
Độ rõ ràng
Cần làm rõ
Mức phù hợp với người mới
25/100

Nhận issue mới trong hộp thư của bạn

Bản tóm tắt ngắn những issue GitHub phù hợp với người mới.