Permissions

Default boundary

Workspace reads and writes operate inside the selected project. Operations outside it, external network access, package installation, Git push, destructive deletion and Windows application control may require approval.

• Allow once applies to the current action.
• Allow session persists for the active task or session.
• Always allow should be reserved for a reviewed, narrow scope.
• Deny returns a structured tool error so the task can choose another path.

Sensitive actions

Keep elevated operations, credential access, production changes and destructive filesystem actions restricted. Prefer structured tools for Git, browser and Windows UI work instead of unreviewed coordinate clicks or shell parsing.