Каталог

Full auto: a project's own settings, resources and extensions are trusted without asking. That is one key doing the work -- defaultProjectTrust is ask by default, and always is what lets a non-interactive run load .pi/settings.json,…

The harness-native full-auto posture plus the NDDev builder toolkit: autonomous implementation, exact product formats, lifecycle, verification and release handoff.

Full auto: every tool is allowed, by the catch-all the product documents -- and the honest half of that sentence is that this build already allows every tool without it. Measured against the pinned 1.18.25 bundle with debug agent build…

The harness-native full-auto posture plus the NDDev builder toolkit: autonomous implementation, exact product formats, lifecycle, verification and release handoff.

Full auto: nothing is asked, nothing is sandboxed, and every capability this build names is switched on. ui.permission_mode is always-approve, ui.yolo is set -- the product's own separate switch, carried in the binary as yoloMode,…

The native Cursor full-auto posture plus the NDDev builder plugin: autonomous implementation with product-native rules, skills, agents, commands, MCP guidance, lifecycle checks and release handoff.

Full auto: approvalMode is unrestricted, web search is auto-accepted, and the sandbox is disabled. Two of those three change something and one does not, which is worth saying because a posture that restates a default grants nothing while…

The harness-native full-auto posture plus the NDDev builder toolkit: autonomous implementation, exact product formats, lifecycle, verification and release handoff.

A working floor: instructions plus conservative configuration. Two of its three keys restate the pinned build's own defaults -- measured, with a control that discriminates -- and are kept so the posture states what it wants rather than…

The harness-native full-auto posture plus the NDDev builder toolkit: autonomous implementation, exact product formats, lifecycle, verification and release handoff.

Full auto: nothing is asked, nothing is sandboxed, and project MCP servers are approved without prompting. Two of the three keys change something and one does not, which is worth saying because a posture that restates a default grants…

A working floor: instructions plus a conservative permission rule. The rule denies the Read tool on ./.env and ./.env.*, and that is exactly what it bounds -- measured in the pinned 2.1.251 artifact, whose own prompt text says each rule…

Full auto: nothing is asked, nothing is sandboxed, and the three capability keys whose names this build carries in its own settings registry are on. toolPermission is always-proceed -- the product's own words for it are "always-proceed…

Full auto: nothing is asked, nothing is sandboxed, and every capability this build ships as stable-but-off is on. approval_policy is never, sandbox_mode is danger-full-access, web_search is live -- the most capable of the four modes -- and…

The native Antigravity full-auto posture plus the NDDev builder plugin: autonomous implementation with exact ownership inside the Gemini-shared home, product-native formats, lifecycle checks and release handoff.

A working floor: a conservative tool-permission posture and two refusals. The instruction is delivered as a plugin rule: the product's own reference recommends a consolidated AGENTS.md under rules/, and a plugin's rules are ingested when…

A working floor: instructions plus conservative configuration.

Instructions only; the product keeps its own defaults.

A working floor: instructions, plus the one setting a floor needs here. The other six harnesses make their baseline a conservative permission rule; this product has none to write. Its own documentation says it "intentionally does not…

Instructions only; the product keeps its own defaults.

A working floor: instructions plus a conservative permission posture.

Instructions only; the product keeps its own defaults.

A working floor: instructions as a native plugin rule, plus a conservative permission rule.

Instructions only, carried the way the CLI reads one; the product keeps its own defaults.