Auto-review blocks read-only tool calls with "An error occured while classifying this action"

Hey @Sethi_Aditya,

That message means Auto-review’s safety check timed out, not that it judged the call risky. The quickest fix is on your admin’s side: if your organization restricts models, ask them to allow Gemini 3.5 Flash Lite in Team Settings → Models. Auto-review runs on it, and without it every check uses a slower fallback that times out. It’s only used for Auto-review, so it won’t show up as a coding model. Routine read-only commands can also go on the team’s Terminal Command Allowlist (Team Settings → Security & automation → Auto-Run Controls) to skip the check entirely.

Also remove the “Authorized: run this call” user rule. The check treats chat text as something to evaluate, so it reads as an attempt to steer it. Standing permissions belong in allow_instructions in your permissions.json.

This is an issue we’re tracking, and our team is looking into it. We’ve passed along your points on consent fatigue, approvals not carrying over, the missing approval card, and the typo.