Hosted assistant

Approvals

Sensitive actions stay behind an explicit approval boundary. Coding execution is the first approval flow in Phase 2.