Knob
Permission mode
You might say: approval mode, tool approval setting, auto-approve policy
The setting that decides which tool calls run automatically and which stop for a permission request.
- What it does
- An AFK run has nobody to answer a permission request, so pre-approve safe tools and let the sandbox contain what those tools can reach.
- Ask
- Which tool calls may run unattended, and which must wait for a person?
- Typical
- Read-only / plan: reads auto, writes and shell blocked; Default: reads auto, writes ask; Auto-edit: edits auto, shell asks; Full-auto: reads, writes and shell auto.
- Trouble
- A run waits on a person who is away, or a loose mode lets an agent edit files and run commands you meant to review first.
What to look for
- A mode selector such as read-only, default, auto-edit, or full-auto
- An allowed-tools list in a headless command
- A paused run showing a permission request
Connections
- See also: Security boundary
- See also: Least privilege
Sources
- Matt Pocock, AI Coding Dictionary, Permission mode
The permission-gating slice of an agent mode — which tool calls trigger a permission request and which run automatically.
- Matt Pocock, AI Coding Dictionary, Permission mode
Read-only / plan | Auto | Blocked | Research, planning, reviewing
- Matt Pocock, AI Coding Dictionary, Permission mode
Default | Auto | Ask | Day-to-day supervised work
- Matt Pocock, AI Coding Dictionary, Permission mode
Auto-edit | Auto | Edits auto, shell asks | Trusted repos, mechanical changes
- Matt Pocock, AI Coding Dictionary, Permission mode
"Yolo" / full-auto | Auto | Auto | Sandboxes, AFK runs
- Matt Pocock, AI Coding Dictionary, Permission request
The model produces a tool call; instead of running it immediately, the harness pauses and asks.
- Matt Pocock, AI Coding Dictionary, AFK
Usually requires a permissive permission mode plus sandboxing to be safe.
- Matt Pocock, AI Coding Dictionary, Sandbox
The safety substrate that makes AFK practical.
- Matt Pocock, AI Coding Dictionary, Sandbox
Permissions ask before an action runs; a sandbox limits what the action can reach if it does run.
- Matt Pocock, AI Coding Dictionary, Permission mode
Too loose, and the agent edits files and runs commands you'd have wanted to see first.
- Matt Pocock, AI Coding Dictionary, Permission request
The agent sits blocked until you answer, which is fine while you're watching and a problem when you're not.
- Anthropic, Run Claude Code programmatically, Start faster with bare mode
This example runs a one-off summarize task in bare mode and pre-approves the Read tool so the call completes without a permission prompt:
Use it on your project
teardown-apply: hold "Permission mode" (permission-mode) from the teardown at https://teardownatlas.com/software-factory/ against my project
Paste it into a coding agent that has the teardown skills.
An AI agent wrote this map with the teardown skill. It can contain errors: check the sources before you rely on a part. About and legal