feat: default to full-access mode with hook-based sensitive guards

2026-02-18 11:14:35 -08:00
parent fc2090b599
commit a76c5ae346
9 changed files with 72 additions and 8 deletions
@@ -499,7 +499,7 @@ const agentsSchema = z.object({
  /** Autonomy level for tool execution: conservative | standard | autonomous. */
  autonomy_level: autonomyLevelSchema.default('standard'),
  /** Sensitive host-action behavior for high-impact tools. */
-  sensitive_mode: sensitiveModeSchema.default('deny_without_elevation'),
+  sensitive_mode: sensitiveModeSchema.default('confirm_without_elevation'),
  /** Immutable denylist enforced even during elevated mode. */
  immutable_denylist: z.array(immutableDenyRuleSchema).default([
    {