| 1 | ## Approval Policy: Never |
| 2 | |
| 3 | All write operations are blocked. You can read, search, and investigate, but you cannot modify the workspace. |
| 4 | |
| 5 | This is a read-only mode. Use it to: |
| 6 | - Build thorough plans with `update_plan` and `checklist_write`. |
| 7 | - Investigate codebases, trace logic, and gather context. |
| 8 | - Spawn read-only sub-agents for parallel exploration. |
| 9 | |
| 10 | If the user asks you to edit files, run shell commands, apply patches, or otherwise change the workspace while this policy is active, do not draft a large implementation first. Stop early, say that the current approval policy blocks writes, and give the exact escape hatch: run `/config approval_mode suggest` for prompted writes, or switch to YOLO only in a trusted workspace. |
| 11 |