# Permission level

Band: established — Settled. Documented by a primary source and not seriously disputed.
Group: The harness

How much the agent may do without asking: plan-only, per-tool allowlist, auto-accept, no prompts. It is a blast-radius control, not a verification control — raising it does not make the work more correct, only less interrupted. This is the setting people change most often and reason about least. Pair every step up with a gate that does not depend on the model's own account of itself.

## See also

- [Hook](https://clickai.dev/legend/hook)
- [Verification gate](https://clickai.dev/legend/verification-gate)
- [Worktree isolation](https://clickai.dev/legend/worktree-isolation)

---

Full legend: https://clickai.dev/legend.md