Transparency Dock & Approval Gates
How BhaiCode classifies agent actions and when it asks you before running them.
The Transparency Dock monitors every agent tool call and decides whether it runs, stages for review, or waits for your approval.
Risk tiers
| Tier | Examples | Behaviour |
|---|---|---|
| Safe (read-only) | Reading files in the workspace, symbol search, git status, diffs | Executes without interrupting you |
| Workspace modification | Creating files, editing code in the project | Executes and stages in the diff viewer |
| High risk (gated) | npm install, docker run, rm -rf, writes outside the workspace, git push | Intercepted — the agent waits for your choice |
The approval prompt
When a high-risk command is intercepted, the dock shows:
- The exact command — command line, working directory, and flags.
- The reason — why the agent believes it is needed.
- Your options:
Runs this specific command only. The next similar command asks again.
Whitelists this command pattern until the current task finishes.
Cancels the command and sends your explanation back to the agent so it can find another approach.
Tune the noise
Approve repetitive safe patterns for the session rather than editing a config file — the whitelist expires with the task.
Was this page helpful?