Skip to main content
Approval rule: humans decide. Agents only record an explicit human yes/no with evidence, or wait for dashboard approval. Agents never approve their own requests.

​
The loop

1

Request

2

Get a human decision

Ask in chat, or point them at the approvals page from dench context --json (approvalsUrl).
3

Record it with evidence

​
Actions you can submit for review

Shipping

Merging a PR, deploying, or changing production data.

Money

Spending money or issuing refunds.

Outbound

Sending external email or messages.

Infra & secrets

Creating or modifying infrastructure, or accessing secrets.
Read-only tool actions don’t need approval. Connected-app actions with their own approval policy use this loop. See Integrations.
Dench’s organization policy is always Full access (yolo); there is no Approvals setting, and older saved ask preferences no longer apply. Dench-brokered Slack, Gmail, Outlook, Calendar, and LinkedIn tools proceed without an organization approval gate. Authentication and connection access checks still apply. Explicit approval requests and per-run approval rules remain separate, and existing approval records are unchanged. Agents must not record a human decision just to make a Full access tool call run.