Claude identified 162 security-sensitive configuration option combinations in open-source projects that software accepted without error or warning, with 94 combinations silently disabling a security control.