Now the question of what the agent may do without asking, which is where most of the real risk sits.
Permission modes
Also called Approval mode, Run mode, YOLO mode
A setting for how much the agent may do before it has to stop and ask you. Modes run from asking about nearly everything to asking about almost nothing.
With an agent running for an hour you can't read every prompt, so the honest question is which actions you want stopped. Choosing a mode is choosing what you will no longer see. The names mislead too: Claude Code's acceptEdits also approves rm inside your project.
“Start in default mode. Add deny rules for Bash(git push *) and Read(./.env), an ask rule for Bash(rm *), and allow rules for Bash(bun test) and Bash(bun run typecheck). Then open /permissions and show me what is there.”