LLM agency: using a separate agent to monitor for dangerous behavior: kateva.org

https://simonwillison.net/2026/Mar/24/auto-mode-for-claude-code/#atom-everything “the classifier runs on Claude Sonnet 4.6, even if your main session uses a different model.”