Approvals
Approve or deny risky commands before they run.
The agent runs read-only commands and its own tooling freely. Anything that mutates state or reaches the network surfaces an Approve or Deny card first.
You stay in control without micromanaging. The agent runs what it needs, and waits on your confirm for the consequential steps like installs, git writes, or network calls.