Permission Modes

The dial on an agentic tool that sets how much it may do without asking: typically plan only (propose, touch nothing), ask for approval (the default; consequential actions produce an approval prompt), and full access. Together with sandboxes, work trees, and audit transcripts, permission modes are the practical instrument of agent governance, and a team's policy can be as simple as which mode is allowed for which kind of task (see Sections 15.7 and 16.4).