01
You approve the blast radius
Control
Dangerous tools need approval unless you opt in. Terminal hard-deny rules block catastrophic commands. Git worktrees isolate risky agent work. Per-tool permission presets: strict, balanced, or permissive.
- Approval gates + hard-deny shell policy
- Worktree isolation for agent branches
- Copilot + Agents mission control