Approvals · pending
Approval queue
Every action gets classified by risk, then a verdict — allow, ask, or block. Safe runs automatically; risky asks you; dangerous is refused even if you override.
Allow · read-only
Needs approval · write / deploy
Block · secret / destructive
Unknown · review scope