Approvals & Permissions
Permission profiles, approval commands, and human-in-the-loop gates.
Permissions decide which tool calls run automatically and which pause for a human. Approvals are the surface where a person reviews risky calls before they execute.
Permission profiles
| Profile | Behavior |
|---|---|
| Auto | Low-risk tools run without prompting |
| Guarded | Risky tools (shell, git push, web) require approval |
| Manual | Every tool call requires approval |
Approving calls
In the Web UI, pending calls appear in the Approvals view. From the CLI:
budgetai sessions show <id> # shows pending approvalsComposing with budgets
Permissions combine with Channel Budgets: a channel can auto-approve low-risk tools while always gating dangerous ones.
Use on_breach = "ask" in an Outcome Contract to route
budget decisions through the same approval surface.