What Auto Mode's Classifier Always Blocks

A team wants to speed up a long Claude Code session by switching from Manual permission mode to auto mode. Before doing so, an engineer asks what auto mode's background classifier will and won't stop on its own.

Which one of the following actions does the classifier refuse regardless of context, even in auto mode?