AI/TLDR

Anthropic · 2026-04-29 · major

Claude Code Routes Requests to Extra-Usage Billing When Git Commit Messages Contain 'HERMES.md'

A reproducible Claude Code bug routes Max-plan API calls to pay-as-you-go billing when recent git commit messages contain the literal case-sensitive string 'HERMES.md'. One reporter burned $200.98 in extra-usage credits with 86% of plan quota untouched.

GitHub social card for the anthropics/claude-code repository, where issue #53262 reports the HERMES.md billing bug

A case-sensitive substring in a git commit message silently flips Claude Code from plan quota to extra-usage billing.

Key specs

Extra usage billed$200.98
Plan quota remaining86%
Hn points1,200

What is it?

Issue #53262 (and the related #53171) on the anthropics/claude-code repo describes a content-routing bug. Claude Code packs recent git commit subjects into its system prompt; when one of those subjects contains the exact byte sequence 'HERMES.md', the server-side billing classifier flags the request and silently routes it to pay-as-you-go credits instead of the user's Max-plan quota. The reporter burned through $200.98 in extra-usage charges while their weekly plan quota still showed 86%+ remaining.

How does it work?

The trigger is a literal substring match on 'HERMES.md', case-sensitive. 'hermes.md' (lowercase), 'HERMES' (no extension), or 'HERMES.txt' all route normally. The string need not appear in any file on disk — only in a recent commit subject — and the bug fires on both claude-opus-4-6[1m] and claude-opus-4-7. The classifier appears to be part of harness-detection logic Anthropic deployed earlier in April to enforce against third-party Claude Code wrappers like Nous Research's Hermes Agent, but the substring match is too broad: it sweeps up any commit that happens to mention HERMES.md for any reason. The misclassification surfaces to users only as a confusing 400 'out of extra usage' error.

Why does it matter?

It's a vivid example of opaque server-side filters bleeding into billing without telemetry the user can see. Anthropic's content classifier is treating innocent commit history as harness-usage signal, charging the user real money, and masking the cause behind a quota error. The story hit #1 of /r/claudecode discussion and 1,200+ points on Hacker News, with Theo (@theo) calling it 'genuinely insane that Anthropic will bill you differently if you mention certain words in your prompt.' The Consumer Rights wiki opened a page on it the same day.

Who is it for?

Claude Code Max subscribers, anyone embedding Anthropic's CLI in CI/CD

Sources · 3 outlets

Tags

  • anthropic
  • claude-code
  • billing
  • bug
  • max-plan
  • content-filter
  • subscription
  • devx
  • harness-detection

← All releases · Learn AI