approval

levelmeaning
read_onlydoes not modify files, services, network, or git
dangercreates, updates, deletes, installs, has side effects
moderead_onlydanger
safe (default)auto-approvedprompt
dangerauto-approvedauto-approved

Cycle with Ctrl+D. Outcomes: approve, blocked(reason), denied.