feat: default to full-access mode with hook-based sensitive guards

src/config/schema.test.ts

@@ -1544,7 +1544,7 @@ describe('configSchema — agents truthfulness/autonomy', () => {
     const result = configSchema.parse(minimalConfig);
     expect(result.agents.truthfulness_mode).toBe('standard');
     expect(result.agents.autonomy_level).toBe('standard');
-    expect(result.agents.sensitive_mode).toBe('deny_without_elevation');
+    expect(result.agents.sensitive_mode).toBe('confirm_without_elevation');
     expect(result.agents.immutable_denylist).toEqual(
       expect.arrayContaining([
         expect.objectContaining({ tool: 'shell.exec', args_pattern: 'git push origin main' }),

src/config/schema.ts

@@ -499,7 +499,7 @@ const agentsSchema = z.object({
   /** Autonomy level for tool execution: conservative | standard | autonomous. */
   autonomy_level: autonomyLevelSchema.default('standard'),
   /** Sensitive host-action behavior for high-impact tools. */
-  sensitive_mode: sensitiveModeSchema.default('deny_without_elevation'),
+  sensitive_mode: sensitiveModeSchema.default('confirm_without_elevation'),
   /** Immutable denylist enforced even during elevated mode. */
   immutable_denylist: z.array(immutableDenyRuleSchema).default([
     {