Autonomy levels: Ask first, Smart, Fully automatic
Short answer: the autonomy level decides what the bot does when it hits a dangerous command — deleting or overwriting files, installing software, sending data out, running unfamiliar scripts. Ask first (default) stops and waits for your approval; Smart lets a guardian model review the command and only asks when unsure; Fully automatic runs everything that is not hard-blocked.
The three levels
| Level | What the bot does | Use it when |
|---|---|---|
| Ask first | Stops and asks you before every dangerous command. Safest — recommended. | You are starting out; the bot works on real company data. |
| Smart | A guardian model reviews each command and only asks you when unsure. Balances speed and safety. | You know the bot and want fewer interruptions on repetitive commands. |
| Fully automatic | Runs every command that is not hard-blocked. | Only in isolated environments (a test machine, a scratch folder). |
At Fully automatic the bot may delete data or run unexpected commands without asking. Hard-blocked commands (rm -rf /, formatting drives…) are still refused at every level.
How the approval card works
When the bot needs approval, a card appears right in the conversation (plus a system notification if you are in another app) showing the exact command. You choose:
- Allow once — this command only.
- Allow this session — the same command in the current conversation will not ask again.
- Always allow — added to the permanent allow-list (editable in Settings → Bot & Permissions).
- Deny — with an optional reason; the bot reads it to change course instead of retrying the same thing.
There is an approval timeout (a few minutes by default, can be set to Unlimited): if you have not answered by then, the command counts as denied. Background routines therefore never slip past your approval step.
Where to change it
- Settings → Bot & Permissions → Bot autonomy — takes effect on Save, no restart.
- Or the level chip above the conversation to switch quickly for the current session.
Advice
- Keep Ask first for at least the first week to see what the bot intends to do with your folders.
- Prefer Allow this session over Always allow for file-writing commands — easier to revoke.
- Preset bots (for example Customer care) are written to only draft, never send email. The autonomy level does not change that instruction; it only decides whether the bot asks you before system commands.
Related: Installation · Pricing & fees.