HERMES.md: Anthropic bug causes $200 extra charge, refuses refund

A bizarre bug in Anthropic's Claude Code causes API requests to be routed to paid 'extra usage' instead of plan quotas when the string 'HERMES.md' appears in git commit messages.
When a git repository's recent commit history contains the case-sensitive string HERMES.md, Claude Code routes API requests to "extra usage" billing instead of the included Max plan quota. This silently burned through $200 in extra usage credits while my Max 20x plan capacity remained largely untouched (13% weekly usage).
Environment
- Claude Code v2.1.119
- macOS (Apple Silicon)
- Max 20x plan ($200/month)
- Model: claude-opus-4-6[1m] (also reproduces with claude-opus-4-7)
Reproduction
The trigger is the string HERMES.md in git commit messages — not the presence of a file with that name on disk. Claude Code includes recent commits in its system prompt, and something server-side routes the request differently when this string is present.
What triggers it vs. what doesn't:
- "HERMES.md": Fails — routes to extra usage
- "test HERMES.md test": Fails
- "hermes.md" (lowercase): Works
- "HERMES" (no extension): Works
- "HERMES.txt": Works
- "README.md": Works
- File named HERMES.md on disk, clean commit msg: Works
Impact
- $200.98 in extra usage credits consumed for requests that should have been covered by the included Max 20x plan quota.
- Multiple projects became completely unusable once extra usage was depleted, while the plan dashboard showed 86%+ remaining weekly capacity.
- The error message ("out of extra usage") gives no indication that content-based routing is the cause, making this extremely difficult to diagnose.
Expected behavior
API request billing should not depend on the content of git commit messages in the system prompt. All requests from a Max plan subscriber should route to the included plan quota first.
How I found this
Systematic binary search: cloning affected repos, testing orphan branches, then isolating individual commit message strings until HERMES.md was identified as the exact trigger.
Source: Hacker News














