feat: default to full-access mode with hook-based sensitive guards

2026-02-18 11:14:35 -08:00
parent fc2090b599
commit a76c5ae346
9 changed files with 72 additions and 8 deletions
@@ -1544,7 +1544,7 @@ describe('configSchema — agents truthfulness/autonomy', () => {
    const result = configSchema.parse(minimalConfig);
    expect(result.agents.truthfulness_mode).toBe('standard');
    expect(result.agents.autonomy_level).toBe('standard');
-    expect(result.agents.sensitive_mode).toBe('deny_without_elevation');
+    expect(result.agents.sensitive_mode).toBe('confirm_without_elevation');
    expect(result.agents.immutable_denylist).toEqual(
      expect.arrayContaining([
        expect.objectContaining({ tool: 'shell.exec', args_pattern: 'git push origin main' }),