Permissions
Every action runs at one of four approval levels. The model cannot bypass them.- Auto-run — happens without asking (reads, memory updates, and any quiet change still at this level).
- Draft, then you approve — prepares a change; you sign off in the conversation before it commits.
- Propose only — shows a plan; you have to ask it to execute.
- Never runs — describes what to do. You do it yourself.