Workflow permissions

interface PermissionSummary {
  approvedFolders: string[];
  approvedNetworkDomains: string[];
  commandExecutionPermitted: boolean;
  backgroundExecutionPermitted: boolean;
  approvedBrowserProfileIds: string[];
  browserAutomationPermitted: boolean;
  externalCommunicationPermitted: boolean;
}

​

Review boundaries

• File nodes and downloads use paths chosen through operating-system pickers.
• HTTP and browser work declare network destinations.
• Browser sessions use specific managed profile IDs.
• Run Command declares the executable separately from its argument array.
• Python and JavaScript Code nodes in run mode use the same command-execution boundary. A material source edit revokes the previous approval.
• Schedule, file-watch, and Gmail triggers require background execution.
• Gmail, Discord, Slack, and plugin external actions require communication review.

​

Revision-bound approval