Why approvals

Approvals exist because Sentinel can do real work on the machine and on outside systems.

Why the app needs them

The tool surface can reach into:

• the local workspace
• shell commands
• repo actions
• MCP tools
• integrations

Once that surface gets broad enough, the app needs a clean place to pause.

Why approvals are separate from permission mode

Permission mode is the broader posture.

Approvals are the moment-by-moment pause.

Those two things do different jobs, so the app keeps both.