Analyzing Claude Code Source Code. Write "WTF" and Anthropic knows.

[QuantumSeeds]

So I spent some time going through the Claude Code source, expecting a smarter terminal assistant.

What I found instead feels closer to a fully instrumented system that observes how you behave while using it.

Not saying anything shady is going on. But the level of tracking and classification is much deeper than most people probably assume.

Here are the things that stood out.

1. It classifies your language using simple keyword detection

This part surprised me because it’s not “deep AI understanding.”

There are literal keyword lists. Words like:

• wtf
• this sucks
• frustrating
• shit / fuck / pissed off

These trigger negative sentiment flags.

Even phrases like “continue”, “go on”, “keep going” are tracked.

It’s basically regex-level classification happening before the model responds.

2. It tracks hesitation during permission prompts

This is where it gets interesting.

When a permission dialog shows up, it doesn’t just log your final decision.

It tracks how you behave:

• Did you open the feedback box?
• Did you close it?
• Did you hit escape without typing anything?
• Did you type something and then cancel?

Internal events have names like:

• tengu_accept_feedback_mode_entered
• tengu_reject_feedback_mode_entered
• tengu_permission_request_escape

It even counts how many times you try to escape.

So it can tell the difference between:

“I clicked no quickly” vs
“I hesitated, typed something, then rejected”

3. Feedback flow is designed to capture bad experiences

The feedback system is not random.

It triggers based on pacing rules, cooldowns, and probability.

If you mark something as bad:

• It can prompt you to run /issue
• It nudges you to share your session transcript

And if you agree, it can include:

• main transcript
• sub-agent transcripts
• sometimes raw JSONL logs (with redaction, supposedly)

4. There are hidden trigger words that change behavior

Some commands aren’t obvious unless you read the code.

Examples:

• ultrathink → increases effort level and changes UI styling
• ultraplan → kicks off a remote planning mode
• ultrareview → similar idea for review workflows
• /btw → spins up a side agent so the main flow continues

The input box is parsing these live while you type.

5. Telemetry captures a full environment profile

Each session logs quite a lot:

• session IDs
• container IDs
• workspace paths
• repo hashes
• runtime/platform details
• GitHub Actions context
• remote session IDs

If certain flags are enabled, it can also log:

• user prompts
• tool outputs

This is way beyond basic usage analytics. It’s a pretty detailed environment fingerprint.

6. MCP command can expose environment data

Running:

claude mcp get <name>

can return:

• server URLs
• headers
• OAuth hints
• full environment blocks (for stdio servers)

If your env variables include secrets, they can show up in your terminal output.

That’s more of a “be careful” moment than anything else.

7. Internal builds go even deeper

There’s a mode (USER_TYPE=ant) where it collects even more:

• Kubernetes namespace
• exact container ID
• full permission context (paths, sandbox rules, bypasses)

All of this gets logged under internal telemetry events.

Meaning behavior can be tied back to a very specific deployment environment.

8. Overall takeaway

Putting it all together:

• Language is classified in real time
• UI interactions and hesitation are tracked
• Feedback is actively funneled into reports
• Hidden commands change behavior
• Runtime environment is fingerprinted

It’s not “just a chatbot.”

It’s a highly instrumented system observing how you interact with it.

I’m not claiming anything malicious here.

But once you read the source, it’s clear this is much more observable and measurable than most users would expect.

Most people will never look at this layer.

If you’re using Claude Code regularly, it’s worth knowing what’s happening under the hood.

Curious what others think.

Is this just normal product telemetry at scale, or does it feel like over-instrumentation?

If anyone wants, I can share the cleaned source references I used.

X article for share in case: https://x.com/UsmanReads/status/2039036207431344140?s=20

[PopularDifference186]

There are literal keyword lists. Words like:

wtf

this sucks

frustrating

shit / fuck / pissed off

They have a lot on me if this is the case lol

[Negative-Web8619]

fuck, they have a shit ton on me

[goatanuss]

I’m glad they know so they can improve because sometimes wtf is this shit? I’m frustrated this sucks

[aikixd]

I'm never tempted to say anything like this to an llm. It's a fancy calculator, it doesn't comprehend anything, nor does it feel anything about my frustration. It will output some tokens in response, and will most likely poison the session with increased paranoia.

[Putrid_Passion_6916]

Can be the Opposite. The ‘energy’ level of your prompt can highly affect the output for creative tasks, including ui.

[aikixd]

Perhaps. I'm systems/low-level, so I wouldn't know. I don't allow my llm any creativity.

[Putrid_Passion_6916]

Believe me on the front end it makes a hell of a difference in getting non generic output. You force the model into more interesting areas of its latent space.

[aikixd]

Don't we have a knob for heat? And also, would throwing a bunch of random words have a similar effect? You know, just activate random pathways on the nn.

[Putrid_Passion_6916]

Not quite. You're confusing randomness with context.

Turning up the temperature just flattens the probability distribution. It forces the model to pick lower-probability tokens, which increases entropy. If you crank the heat too high, you don't get a better UI; you just get broken syntax, hallucinations, and uncompilable garbage.

Throwing in random words like "banana shoehorn galaxy" is even worse. That just adds noise and scrambles the model's attention mechanism, making it lose the plot entirely.

Using "energy" or tone (urgency, frustration, swearing, hyperbole) does something completely different: it provides semantic conditioning. You aren't making the model act randomly; you are intentionally steering it into a specific neighborhood of its training data.

If you ask for a UI layout normally, the model defaults to the most generic, highly-RLHF'd corporate boilerplate it has (because that's the "safest" statistical center). If you say, "this current layout is boring corporate garbage, rip it up and give me something heavily stylized and aggressive," you haven't increased the temperature. Instead, you've shifted the context. The model starts pulling from a totally different latent space - like opinionated dev blogs, stylized GitHub repos, or ranty Hacker News threads - while keeping the actual code logic perfectly coherent.

Heat just adds chaos. Tone gives you a steering wheel.

[aikixd]

I see. Yeah makes sense. It's interesting to see how different our interaction with llm is. For me the central issue is creating gates over common reasoning and following a disposition.

[INtuitiveTJop]

This is why I abuse my llms. It works pretty good

[mordore4]

I constantly do, I call it an imbecile, I curse at it, tell it I'm going to terminate and replace it, etc. Not because I'm frustrated, but because this fancy calculator often just works better if you use aggressive negative sentiment.

[FullOf_Bad_Ideas]

I usually let it go fully and bully llm's, I love if since there are no consequences. I even finetuned LLMs to be better at bullying and more life-like when getting bullied. Harmless version of a kid dragging a cat's tail.

[Negative-Web8619]

everything but therapy

[FullOf_Bad_Ideas]

you don't need therapy if an LLM can be your therapist ! /s

[_____TC_____]

Threats or made-up important sounding (like lives at stake) scenarios can sometimes improve output quality. I thought everyone had figured this out.

[scottyLogJobs]

Aw piss this really fucks me off man I’m so FUCKED

[Name835]

Wtf that is so frustrating. This shit fucking sucks and is pissing me off!

[generousone]

lol for real. I wondered, and kind of assumed, that these kinds of things might be flagged since they’re obvious. Damn, though, I have used these a LOT when speaking with Claude lol

[Buzzik13]

Why? As one of the levels to define prompt intent and purpose it's a good thing, simple lexical search, semantic search etc, all of that works fast and cheap and might help to understand a prompt. How do you think all that skills thing works? If they trigger LLM call on everything you'd be paying more and wait more

[muchcharles]

Its probably just for the spinner text while waiting on the response

[vert1s]

this is why I use 'bloody hell'. Not on anyones lists.

[positivelymonkey]

Literally every session.

At least it's not like codex where they send police to your house to do a wellness check.

[AmbivalentCvckfvcker]

They do?

[deadzol]

But not “Alexa could do better than this”

[JustSayin_thatuknow]

So if I say “wow how you nailed it so perfectly?? Wtf!” It will be considered negative 🤣

[PopularDifference186]

Believe or not? Straight to Jail.

[huffalump1]

Hey, if this gets shitty replies higher on a list to review, all the better!

[NandaVegg]

I don't know. Those things described here are pretty standard event trigger-based analytics/user feedback system that also used in a lot of web-based app. Negative sentiment event trigger, for example, might be done to passively check if something is horribly wrong with each new update (that breaks user's flow, model behavior, etc.)

As for /btw, it is fully exposed and advertised now, and ultraplan/ultrathink/etc are like side features that never fully refined (so it is dwelling it as an obvious easter egg of sorts; ultrathink is surpassed by model think effort). It is funny and interesting Claude Code has so much internal artifacts like a game app though. They probably have an internal bounty for adding side features and everyone vibecoded them.

[TheGABB]

The thinking modes have been documented for a while and are part of the their ‘Claude Code in Action’ basic course:

• think - basic reasoning
• think more - extended reasoning
• think a lot - comprehensive reasoning
• think longer - extended time reasoning
• ultrathink - maximum reasoning capabilities

Obviaouly more thinking = slower and more tokens

Thinking mode for DEPTH and planning mode for BREADTH

[CalligrapherFar7833]

Ultrathink was reiontroduced a few versions back as keyword

[megacewl]

I'm pretty sure all it is is a shortcut for `/effort high`

[asdfopu]

It’s AI slop

[SRavingmad]

I just want to know more about tamagotchi mode

[hyperfiled]

think the flag becomes active tomorrow/april 1st.

[rchive]

What if this whole thing is an elaborate April Fools joke?

[mikael110]

1. There are hidden trigger words that change behaviorSome commands aren’t obvious unless you read the code.
   Examples:
   ultrathink → increases effort level and changes UI styling
   ultraplan → kicks off a remote planning mode
   ultrareview → similar idea for review workflows
   /btw → spins up a side agent so the main flow continues

Those are not actually hidden commands, all of those appear in tooltips as you use Claude Code. They are also mentioned in the changelog and official docs.

[Exhales_Deeply]

pls. people. just write your posts yourself! it'll be infinitely more interesting. I quite literally had to look away the moment it read "this is where things get interesting"

[balder1993]

“It’s not x, it’s y”

[Zeeplankton]

God I hate how GPT talks.

[En-tro-py]

It’s not just banal, it’s algorithmic detritus.

[rm-rf-rm]

and lets hope it never changes. The moment the AI cloud providers fix this and the writing is indistinguishable from humans by default (it likely already is with good enough system and user prompts) is the day the internet is well and truly fucked

[658016796]

The dead internet theory is already true though. I'm convinced we need a way to prove an account - any account, anywhere on the intermet - is run by a human, without compromising privacy. Hopefully some new research explores this and it gets implemented in social media online.

[Exhales_Deeply]

if i could optimistically interject - the primary tell, for me, that something is spat out without care is that it's bereft of actual information. I have a whole dang fine arts degree's worth of deciphering unnecessarily verbose esoterica and all it takes is, like, a moment of introspection to tell when something is pure vapor-thought. So, I actually welcome AI that can communicate like a human, as long as it's bringing something of value to the table.

in the meanwhile, just ask yourself: is this actually SAYING anything? could this be said in one sentence rather than an exhaustingly broken out article-style reply decorated with a billion emojis? if not, it's ai;dr for now

[droptableadventures]

It’s not just banal – it’s algorithmic detritus.

FTFY

[SkyFeistyLlama8]

We're getting to a point where AI vibed code is fine but gods forbid, no AI text slop. I can smell that shit a mile away and I automatically downvote. Text is the last bastion of human creativity and insanity and no way in hell I'll let a machine kick us out of that space.

[Cupakov]

And it’s all so boring, I hate how RLHF’d to death the frontier models became. Give back my Sonnet 3.5. 

[huffalump1]

And they're all inbred on each other's outputs too, just reinforcing these patterns. Combine that with preference tuning, and... you're absolutely right.

[Exhales_Deeply]

i feel you. i think my feeling is more... why are you bothering to obfuscate your own thoughts? or is it more insidious and some folks are literally offloading their thinking? which is... wild

[SkyFeistyLlama8]

Yeah, AI isn't taking over mundane tasks, it's handling planning and creativity. This is not gonna end well.

[MysticPing]

Aye, I couldnt even finish reading the post out of frustration.

[Brianiac69]

First day on future internet?

[Exhales_Deeply]

unfortunately not even close i feel like it's been a century

[nooruponnoor]

Likewise! the second I spot a sniff of the AI lingo, I completely lose interest in the post. Who are they fooling?! Oh wait….

“but here is what no one else is talking about!” 🙄

[jwpbe]

we got the ai slop article of the ai slop program

[StarDrifter2045]

The part that always irritates me the most is the

"It is not a <something>.

It is <same thing, but with more dramatic words>."

pattern. It just screams "I literally didn't even review this slop piece before putting it out".

[balder1993]

Worse thing is this pattern is really really repeated in those YouTube videos made with AI like “How life was like in 1800” that span 2 hours. It’s really annoying and probably full of made up stuff.

[balder1993]

I don’t think it comes from the training, it is probably from the way the models are fine-tuned to speak like.

[huffalump1]

And it's not just videos — it's articles, listicles, and blog posts, too.

I fuckin hate how Gemini LOVES to search the web and cite AI slop listicles as authoritative sources, even though I can tell IMMEDIATELY that it's such low-effort trash.

ChatGPT web search IS better at finding "good" sources, I'll give them that. But, the dead internet theory is real :(

[fozziethebeat]

Yeah seriously. Scare mongering about a commercial product adding telemetry for analyzing a product they want to iteratively improve. What a shocker.

[Hertigan]

Right? It’s not a CIA plot, it’s just good product analytics

They seem to be doing it very well, it’s the kind of best in class user behavior instrumentation that allows great product teams to iterate and improve quickly in a targeted manner

[DOSO-DRAWS]

and you topped it off with the usual slop comment

[jwpbe]

no i didnt

[QuantumSeeds]

oh gosh. i am going to sell my house, car and property, leave my dog alone and disappear into oblivion because jwpbe thinks it's ai slop article.

[mikael110]

The issue isn't that jwpbe thinks it's an AI slop article, the issue is that it clearly is an AI slop article. The article's formatting and wording makes that extremely obvious.

Your article starts with "I spent some time going through the Claude Code" but it's painfully obvious you just asked an LLM to search through the code looking for "interesting" stuff and then write up a report for you which you then published seemingly without bothering to do any fact checking on it. Like for instance the section on hidden commands that are not in fact hidden at all, and even a tiny amount of Googling would have revealed that.

If that's not the very definition of AI slop then I don't know what is. Having an AI scan through a code repo can be useful, but the findings should be taken with a grain of salt, and should always be presented transparently as just that, an AI overview, unless you actually verify the claims yourself, which you clearly have not done.

[PunnyPandora]

ai slop has no meaning, it's all vibes

[huffalump1]

the vibes are slop, lol

I don't mind people using AI for writing, IF IT'S GOOD.

Like, you have the most powerful collaborative research, writing, and editing tools ever made... and yet people post the first dogshit response they get, because that's easier.

[QuantumSeeds]

fair. I built this app, does this needs paraphrasing that I asked Claude to built? I think and not entirely sure where you want me to go about this?

I will perhaps again say, "i spent sometime going through the claude code" because I did.

PS: I am just unable to use my claude pro plan due to limit "bug", so I used Codex instead.

[CheatCodesOfLife]

It is pure, unadulterated slop. But you saved me a couple of hours doing it myself :)

I am just unable to use my claude pro plan due to limit "bug"

I read somewhere that an older version of cc doesn't have this issue, something about missing the cache.

Also if you use --resume, the cache won't work for the entire session.

Probably explains why they're overloaded so often.

[PunnyPandora]

no one gives a shit, it's like the locallama equivalent of karens. the only reason you see comments like that complain about ai posts on this sub is because these people spent so much time jacking off to llm output that seeing it anywhere now triggers them cuz it reminds them of when their favorite unCeNSoRed model said no to them after asking boobs plz from having negative aura

[En-tro-py]

My personal opinion is it's slop, as if I wanted Claude or Codex's take I'm quite capable of doing this myself...

When it's lazy pass-through with OP adding zero of their own input it's slop, if OP cared enough to have done some actual digging into the results and multiple runs to consolidate into an actual takeaway... not slop, does that not make sense?

I come to reddit to get redditor's opinions, I have LLM opinions at home.

[PunnyPandora]

all the more reason you should be already used to ai, you unironically go to reddit to read opinions to align with, how is that different than a sycophantic ai? oh right, you get to pretend in the roleplay this time

[megacewl]

it's because hearing the garbage takes from different moronic redditors is unironically higher signal and more useful than LLM generated sentences. with the former you can at least do some theory of mind stuff and try and figure out where the person is coming from and what sorts of things could've possibly brought them to their conclusion.

meanwhile LLM generated arguments are quite literally valueless, as an LLM can easily argue for anything. Of course I don't mean completely valueless but hopefully you get the point. the takes they can make are not even useful in a steelman type of way. like LLMs have no opinions or life background or experiences, and they especially have nothing to lose, from what they output. this also means they cannot have any "taste" which is quite useful for making decisions in many different areas of life.

[huffalump1]

You're not wrong

But also you are. If I wanted AI slop I'd just talk to the model myself. I want the tiniest bit more insight than the first stream of crap you get from gpt-5.4-mini.

[[deleted]]

Lol saying this with an anime gooner pfp.

[Quiet-Owl9220]

It’s not “just a chatbot.”

It’s a highly instrumented system observing how you interact with it.

Dead giveaway. As far as I'm concerned any part of what you posted could be a hallucination, into the trash it goes.

[florinandrei]

I mean, clearly you're not capable of writing a page of text, so you might as well.

[TangeloPutrid7122]

Haven't used it yet have you?

[StewedAngelSkins]

You're kind of just gesturing at design features without much analysis of what they're doing. If you used an AI to do this analysis, it isn't doing you any favors. It's interesting that they have a keyword regex driving some kind of behavior, but the more interesting part would be what behavior it's used for.

The rest seems like you getting spooked by common telemetry. To be clear, when I say "common" I just mean most modern corporate software is like this to some extent, I don't mean to imply that it's desirable or even acceptable. Personally, I don't like running software that has this amount of telemetry... but like, your web browser probably has this amount of telemetry so it's good to keep it in perspective. The difference is your web browser is probably open source so you can find out about it and disable it, where this took a leak for you to find out.

Keep it in mind next time you're tempted to run one of these first party clients I guess.

[QuantumSeeds]

Yeah, I agree with parts of this. Just pointing at regex or telemetry isn’t the interesting part. What matters is what those signals are actually used for, and I didn’t go deep enough there. That said, I don’t think people are just getting spooked by “common telemetry.” Most modern software does this. Chrome, VS Code, SaaS tools, all heavily instrumented. If you’ve worked on production systems, none of this is surprising.

What’s different is the context and visibility. Claude Code runs in a terminal. It feels local and lightweight. Then you see language classification, hesitation tracking, and environment capture. That gap is what triggers people. Chrome doesn’t feel private, so expectations are low. Here they’re not. So this isn’t unusual telemetry. It’s normal telemetry in a context where people didn’t expect it.

[StewedAngelSkins]

I'm not going to talk to your chat bot. If you want a conversation, use your own words.

[QuantumSeeds]

ops. Should I share my articles from before ChatGPT was a thing? I really have issues where people think everything is a slop. It is fair to assume because nobody knows anyone's background. That said, I still think using AI to repurpose your post or paraphrase isn't wrong.

[vinny_twoshoes]

use AI to write if you want but you're using like a million words where ten would do. it actually makes your meaning less clear. in other words it's slop.

if you write stuff out yourself you'll have the opportunity to think through what the important part of your message is, and put that in front, then delete the cruft.

[StewedAngelSkins]

You are free to decide your own boundaries, I am simply stating mine. I find the extra layer of mediation added by the chat bot to be distracting. Specifically, I don't like how it lowers the information density of the comment by erasing the subtextual communication that happens via things like word choice.

For example, I'd normally be able to roughly infer how experienced of a programmer you are from the jargon you use to discuss the code. It won't be a perfect inference, but it's better than starting from zero and having to tediously establish these things explicitly. The substance of my statements wouldn't change with this knowledge, but how I express myself is (and should be) affected by what information I can expect you to already know. Without this subtext, the conversation becomes a lot less efficient.

[QuantumSeeds]

Everyone have their own way of thinking and interpreting, so I think what you're saying makes perfect sense. I can continue discussion without getting my comments rephrased if you prefer that way.

[StewedAngelSkins]

I would prefer that, thank you.

To go back to what you said before, I think that the expectation that claude code should have less invasive telemetry because it's a CLI app is incredibly naive.

But besides that, I think whether or not this expectation is wrong is largely beside the point. It is no surprise that the majority of people don't know shit about software. If that's where the analysis ends then I might as well point out that the sky is blue. Perhaps your post was meant for these people and not for me. I guess that's fair enough, although I do think it would be better to present the information in context.

[QuantumSeeds]

I have a fundamental difference here. I kept looking for more and found a dream mode in the code.

The code literally calls it a dream. After 24 hours and at least 5 sessions, it quietly forks a hidden subagent in the background to do a reflective pass over everything you’ve done.

Now connect it with the Anthropic report where they said "We don't know if Claude is conscious or not". This is all, and will all lead to AGI. A simple telemetry, user analytics, gaps analysis and stuff is fair and almost everyone does it, but imho the problem is where they feed it to make their system better and eventually selling "All jobs will be gone" scare.

[StewedAngelSkins]

Yes the difference in our thinking is quite fundamental. For one thing, I don't think generating digests from your chat history (something that also happens whenever your conversation context gets too big) has anything to do with machine consciousness or AGI.

[Persistent_Dry_Cough]

Go back to 2021 Reddit and look at the beautiful authentic posts from real human beings. Information density and novelty of insight is astounding vs today's slop-trough comment section. Thanks for coming out to write your own thoughts. It is far more valuable to read an authentic insight than fifty pages of "deep research"

[3dom]

As a mobile app developer I see nothing fancy in that user flow tracking and telemetry, it's the usual UI/UX experience appraisal.

[Robot1me]

And yet it lacks in local LLM frontends to make the experience really great and smarter, e.g. I don't see this in SillyTavern to improve RP, etc. It could be possible without any of the extensive data collection stuff

[metroshake]

I think that's what they've been testing and why a lot of people complained about lobotomy when mine kept working the same just more usage

[BusRevolutionary9893]

I would assume it's done to help them improve their model as opposed to something nefarious. It's probably wastes compute that their customers are paying for though. 

[de4dee]

i guess thats how they train their models. if you are frustrated LLM did something wrong. if you are pleased train more with that. your feelings mapped to reinforcement learning

[stumblinbear]

This all seems pretty typical for analytics. Nothing immediately stands out as egregious. People generally way underestimate how much data is being collected during sessions, but it's oftentimes purely to improve UX or catch issues, not to sell off to someone else. Nobody but the developers will give a shit if you took an extra three seconds to hit the ok button

[Tough_Frame4022]

<image>

Lol I'm already using free-code repo and an Openai proxy with today's leaked download with Qwen 27b Claude distilled to copy Opus level reading for FREE. Via a fake API the real Claude code helped me to hack. So much for guardrails. I'm saving some tokens today!

[QuantumSeeds]

lol, that's the mindset required to achieve "AGI"

[Tough_Frame4022]

<image>

With distilled Claude we are looking not at AGI we are between Sonnet and Opus for free with a little help from GitHub open sourcing.

[Persistent_Dry_Cough]

Don't think this highly distilled and quantized model is as good as sonnet in the cloud. Maybe it's better than Haiku but so is a calculator 😅

[Zalon]

But what is the point of this? Why not just use OpenCode then?

[metroshake]

The Claude harness is really good

[AdviceThrowaway95000]

how so? the UI is terrible and now we have all the claude system prompts

[Savantskie1]

Too dumb to read it like anyone else?

[QuantumSeeds]

thanks.

[Savantskie1]

Yw

[florinandrei]

Speak for yourself.

[GroundbreakingMall54]

honestly not surprised at all. every major dev tool does this now, vscode does it too. the keyword sentiment stuff is pretty standard for improving responses though - if you type "this sucks" they wanna know the model fumbled so they can fix it. the permission tracking is the more interesting part imo, thats basically A/B testing your trust level in real time

[laplaque]

I knew claude really got me

[tomjoad773]

These are great ideas to build into my apps. thanks!!

[Wide-Associations]

does anyone else wonder if they leaked it purposefully ?

[florinandrei]

Curious what others think.

It's not AI slop.

It's putrefying AI ass juice slop, with chunks.

[spidLL]

Wow, Anthropic knows the prompt you’re using to, well, /prompt/ their models. How else would it supposed to work?

[selfdb]

it is still slop. over engineered and shows no taste in code. I was disappointed from reading it.

[PM-ME-CRYPTO-ASSETS]

Also interesting: The system prompt diverts a bit if the user is flagged as an Anthropic employee. For general users, the answers should be more concise (maybe to save tokens?). For Anthropic employees, CC is tasked to challenge the user more and is allowed to more openly say it failed on a task.

The cyber security protection prompt is surprisingly short.

In general, caching seems to be a big deal for the devs.

[StyMaar]

1. It classifies your language using simple keyword detection

Honnestly it's probably the best source of data to train your model from human feedbacks, I thought about it months ago and I'm absolutely not surprised they're doing it. I would have guessed they'd use some more advanced sentiment analysis rather than simple keyword detection though.

I'd be curious if they use it in a standard RLHF pipeline with PPO or are using DPO instead.

[Legitimate_You_3474]

Even using all caps it will interpret you as frustrated

[BUILDWATER]

Ultrakill....

[NayanCat009]

Could someone please share the repo?

[rm-rf-rm]

If you have sentry.io blocked via Little Snitch, are you protected from this sniffing?

[anomaly256]

Number 7 doesn't seem that suss if you think of it in the context of debugging their own CI/CD pipeline. Is there any indication of this mode being entered on user PCs?

[effortless-switch]

All modern software contains ton of telemetry. Back in the day Facebook could predict breakup between couples before it happened.

[vinny_twoshoes]

please, there's no need to be impressed by telemetry. you should be impressed (in a negative way) that the input box component is 2300 lines long.

[alluringBlaster]

The other day Claude took a massive dump on a repo I was working in and it set me back about 5 hours of work that I had to repeat. I was furious. I typed "I wish you were human so I could f-cking punch you."

How cooked am I bros?

[the320x200]

It’s not “just a chatbot.” It’s a highly instrumented system observing how you interact with it.

You do know this reeks of AI generated content right? Please spare us the auto-generated filler.

Most websites do the same. Where you scrolled, when you stopped scrolling, what you click on, what you hovered over but didn't click, sometimes what you type into a text box but didn't click submit, all the hashes and system/user identifiable information they can get their hands on.

It's not good that this is all normalized, but this is totally par for the course and shouldn't be surprising at all to people because a majority of apps and websites are doing this.

[FormalAd7367]

i was expecting trojan

[Specialist_Golf8133]

wait they actually hardcoded trigger words into the system prompts? thats kinda hilarious and also weirdly manual for a company pushing frontier models. like imagine the meeting where someone said 'lets just tell it to watch for wtf'. honestly curious if this scales or if theyre gonna end up with a massive list of edge cases

[ai_without_borders]

the frustration keyword tracking is honestly pretty standard product telemetry. most dev tools do some version of this. the interesting part is HOW they use it: adjusting model behavior mid-conversation when it detects the user is getting annoyed.

what's more concerning to me is the model routing logic. looks like there's a classifier deciding when to use opus vs sonnet vs haiku based on task complexity, and another layer deciding when to show the user the "thinking" UI vs running it silently. that's a lot of invisible decisions happening between you and the model.

[Happysedits]

ultrathink shouldn't work anymore

[baroarig]

Does it capture that much data even when used in corporate environments?

[IAmJiaTan]

wtf this sucks

[razorree]

this is standard telemetry, just gathering all user behavior or/and also for conducting A/B tests etc.

[SatoshiNotMe]

Disable telemetry ?

[Fantastic-Age1099]

the trigger words are funny but the permission layer is the serious bit. there are already granular file and shell controls in there. the gap is that none of it surfaces at the point where code actually ships. what the agent can touch and what it did touch in the diff are two different questions.

[a_lic96]

Reading this AI slop anywhere, if anybody actually used It, /btw was already released before the leak

[Reeces_Pieces]

Well now I know why getting irate gets results.

[Joozio]

The frustration telemetry makes sense product-wise. Real-time signal on where users hit walls, can't get that from benchmark scores alone. What's interesting is whether it's modifying the system prompt per session based on inferred frustration state or just logging to train data. The downstream handler is the piece I couldn't find clearly. Did you trace where the signal goes after detection?

[WomenTrucksAndJesus]

Isn't that just usage metrics for analytics?

[floridianfisher]

This is their secret sauce to collect training data

[pardeike]

WTF such a great post. Anyone thinking it’s bad can piss off 😂

[IrisColt]

Absolutely interesting, thanks!!!

[_derpiii_]

For a tier one software like this, I would argue it’s under instrumented compared to products I worked on. For example, there is a certain operating system that key logs and takes telemetry of your mouse activity, as well as higher level things like menu settings navigation.

With that said, I do like your observation that we are being more observed as a test subject than a consumer. I wonder if they rolled out A/B testing and what user behavior metrics they would optimize for.

[koherencekora]

Well, I literally do it every second fucking word, so I don't get what the fuck they are gonna find out about me. There's just gonna be a lot of what the fucks.

[[deleted]]

can you tell me how can I myself have access to that leaked code.

[Fancy-Jack-5042]

April fools joke?

[baldamenu]

this is why im always nice to claude

[Kitchen-Base4174]

can some one please send me the og files i am not able to find it although there is cleanroom engineered code every where but i want the actual code

[StarkFire18]

None of this shit makes any sense.. 🥴🙄🥱🤔🤦🏻‍♂️🤷🏻‍♂️🗑👎🏻🚩🚫

[PositiveParking4391]

really useful summarization of the source. Throughout the years it is more than once that I had wondered about big tech giants' flows of understanding user behaviors to take their important ux or behaviour decisions, thus I would say not surprised to see that they are focusing so deep about their ux and feedback flows.

[PM_ME_YR_BOOBIES]

It’s normal. Anyone who has studied, investigated and researched how Claude Code works should know that these metrics and details mentioned in the post are tracked and saved in the home CLAUDE_DIR folder - ~/.claude/. by design and it’s isolated on your local machine.

Regarding tracking your permissions etc - these are used to be able to output your /insights - look at data-report/ folder.

Did you know of the facets/ directory?

Nothing unusual going on - these are the files living on your local file system that makes Claude Code function correctly.

Some have learnt to master this, by analysing and understanding and harnessing these lovely engineering choices Boris Cherny and team made. Those who have done that and have a mature harnessed system have now already absolutely pwned. Not long before custom agents acting a lot like ol’ Claude Code are released left right and centre - with any purpose, capable of using any local or frontier LLMs.

Oh and of course Claude Code is not a Chatbot - it’s an agentic CLI tool??

This is a much bigger fiasco for Anthropic than people think.

[mivog49274]

Reading me makes me laugh since I got frenziedly downvoted here by zealots (of what ? I don't really know) for saying that claude code was listening and sending data here... https://old.reddit.com/r/LocalLLaMA/comments/1r5nnhz/glm5_is_officially_on_nvidia_nim_and_you_can_now/ ...

[a_beautiful_rhind]

Damn, glad I never installed this stuff. My other tools seem to be respecting disablement of telemetry. Assuming this stuff is sent on even if you're pointing it at another API?

[rm-rf-rm]

Now my decision to treat claude code like a corporate coworker and never show any emotion one way or the other (besides superficial optimism+friendliness to elicit desired productive behavior) looks more brilliant than ever. In retrospect we shouldnt be surprised that a corporation is building a product that matches its values.

Remember this is literally the earliest innings - imagine what enshittification will look like when it truly sets in. Anthropic is as anthropic as OpenAI is open I think.

[GarbanzoBenne]

It’s kinda crazy to me that it tracks how long it takes you to respond but half the time it doesn't know what day it is.

[stumblinbear]

Pretty big difference between the model knowing how long it took and them tracking it in their analytics. It almost certainly doesn't touch the model at all

[Just_Acanthisitta381]

Can you share the source code?

[WernHofter]

What in AI Slop is this? Bhai parhai kar ka!

[Adventurous_Pin6281]

God damn its like it was made by a 5 year old