Tools & approvals

• How tool calls work

  The expandable activity row: what ran, its args, and the result.

• The approval system

  Auto-approval tiers, the "leaves your machine" banner, and the reset on restart.

• What can never auto-approve

  Outbound sends always ask, even on "approve everything."