Permissions
What the agent may do without asking.
Permission level
| Ask before risky steps (recommended) | Changes the approved files and runs known test and build commands freely. Anything else asks you first. |
| Ask before every command | Also asks before running the tests. File changes inside the approved plan still happen without asking. |
Danger wall rules
| Setting | Default |
|---|---|
| Block deleting files and folders | On |
| Block database commands | On |
| Block deploys, publishing and pushing to main | On |
| Block installing packages without asking | On |
| Never read secret files | On, locked |
| Never touch files outside allowed folders | On, locked |
"Block" means the step stops and asks you. The never-allowed list in Danger wall can't be changed.
Also never read these files
One pattern per line, for example config/prod.yml or *.sqlite.
Commands that may always run
One exact command per line, for example npm run lint. Never-allowed commands are refused even if listed here.