Auto mode is already the default in Claude Code for those plans. The October 22 update extends it to the web, desktop and mobile apps. Enterprise admins get an email before it changes for their organizations, and Enterprise and API users stay opt-in for now.
Anthropic's case rests on its own testing. It says people approve 97% of Claude Code permission prompts, and in a study with 1,053 paid testers, humans caught a planted dangerous command 13.6% of the time while auto mode blocked 89% of them. Those are Anthropic's numbers. The post also says auto mode doesn't remove risk, and recommends reviewing high-stakes production changes yourself.
If the classifier blocks three times in a row, or 20 times in a session, Claude Code falls back to manual approvals. Broad allow rules like Bash(python:*) are set aside while auto mode is on.

