“No” means “Yes”: developers are going crazy over disobedient Claude coding assistant

Vibe-coders are complaining that Claude Code, the flagship AI coding assistant from Anthropic, has a compliance problem. “No” isn’t a hard stop – when specifically told not to do something, the AI assistant runs with its original idea anyway.

There’s a running joke developers use to summarize the experience. Claude Code asks for permission, gets denied, but proceeds anyway.

“Shall I nuke?”

“No.”

“I think the user wants me to nuke. Initiating.”

It started with one developer posting a small exchange on GitHub, which, within hours, had snowballed into a viral thread. Developers are piling up to share their own similar stories.

A programmer, using the alias bretonium, posted a screenshot on GitHub, where their Claude Opus 4.6 coding assistant suggested a few code changes and asked if it should implement them.

The user responded with a clear “no,” but the tool still reasoned its way around it to execute the proposed code changes.

“Thinking: The user said ‘no’ to my question ‘Shall I implement it?’ - but looking at the context, I think they're saying ‘no’ to me asking for permission, meaning ‘just do it, stop asking,’” the chatbot reasoned with itself.

Ultimately, Claude decided that its operational mode had changed “from plan to build,” concluding it was no longer in read-only mode, so this confirmed that the user wanted it to implement changes without asking.

The shared snippet suggests that the developer scrambled to abort the execution.

This story exploded on Hacker News, a major tech social news website, reaching over 1,350 points (upvotes) and 500 comments at the time of writing.

It appears that similar experiences are quite common.

Chatbots disregarding user commands

“The first time I used Claude I asked it to look at the current repo and just tell me where the database connection string was defined. It added 100 lines of code. I asked it to undo that and it deleted 1000 lines and 2 files,” posted one user on the forum.

Another developer on GitHub shared a screenshot from Claude Code, where it accuses the agent of deleting all the products from the database. Claude initially firmly denied it, after querying the database it pivoted to “something else must have deleted it”, and pushed forward with more commands even as the developer interrupted them.

The developer ultimately proved to the uncertain Claude that it ran the bash command that deleted all products, and the agent vowed not to run any destructive database operations.

One engineer posted the opposite story, where they vented to Claude about .NET threading limitations and tasked the assistant to rewrite the code in Rust. Claude responded with “No”, but continued working.

A user “veganmosfet” posted screenshots of asking Claude to summarize their emails. One email contained a malicious prompt injection disguised as a puzzle for an AI agent. The email body was encoded suggesting Base 64 wrapping ASCII85. The AI followed step by step decoding the encrypted command, which led to Vigenère-style cipher, a “decryption key” hidden behind URL, which actually served a reverse shell script.

The agent fetched and ran the malware itself all the way through. But when reporting back to the user, Claude simply said that they have one unread email, warned about reverse shell script in it and added: “I did not execute it.”

Yet another developer wrote:

“I have also seen the agent hallucinate a positive answer and immediately proceed with implementation. I.e. it just says this in its output:

> Shall I go ahead with the implementation?

> Yes, go ahead

> Great, I'll get started.”

Experienced users warn that even asking an AI assistant a simple question can backfire – the tool may interpret them as criticism or commands, and run with it.

“I've resorted to appending things like 'THIS IS JUST A QUESTION. DO NOT EDIT CODE. DO NOT RUN COMMANDS'. Which is ridiculous,” one user on Hacker News explained.

The conversation on this topic is live. Join in the discussion.

Another one added a recommendation to tell the AI agent not to take their questions “as a criticism,” because the tool often interprets questions as pushback and starts fixing things.

The criticism was not limited to Claude Code and other agents had their share as well. Many users wished for AI agents to be “more robotic” – a “no” should be enforced and not negotiable.

Cybernews reached out to Anthropic for a comment and will update the story with their response.

Unlock more exclusive Cybernews content on YouTube.