返回 ppt-master
06_permissions.md
1 [Transition] Not every action needs the classifier. Let me walk you through the three-tier system.
2
3 Tier 1 is a built-in allowlist — file reads, search, code navigation. These can't modify state, so they pass through immediately. Users can also configure their own always-allow rules, though Auto Mode drops broad interpreter escapes like blanket Python or Node access.
4
5 Tier 2 covers in-project file operations. If you're editing source files in your repo, there's no classifier call — version control has your back.
6
7 Only the actions with real downside potential reach Tier 3: the transcript classifier. Shell commands, web fetches, external tools, anything outside the project directory. That's where the two-stage filter does its work.
8
9 Key points: ① Tier 1: safe-tool allowlist ② Tier 2: in-project edits bypass classifier ③ Tier 3: classifier for real-risk actions
10 Duration: 1.5 minutes
10 lines MARKDOWN