coding-agent-approval-gates - The LGTM

The LGTM

Sign in Subscribe

coding-agent-approval-gates

A collection of 20 posts

Claude Code 2.1.191 Fixes the Background-Agent Zombie Problem

Claude Code 2.1.191 Fixes the Background-Agent Zombie Problem

Claude Code 2.1.191 is a patch release, but the lead fix deserves a much louder headline: stopped background agents no longer resurrect. That is the kind of sentence that sounds funny until you remember that background agents are not browser tabs. They are delegated coding sessions with tools,

Qwen Code 0.19.2 Makes Permission Policy a Remote API, Not a Slash Command

Qwen Code 0.19.2 Makes Permission Policy a Remote API, Not a Slash Command

Qwen Code 0.19.2 is not really about a new command. It is about admitting that a local coding agent is no longer just a terminal process with a chat loop attached. Once the same agent can be reached through a daemon, an ACP client, a browser surface, and

OpenClaw’s Inline-Eval Patch Is the Boring Guardrail Vibe Coding Needs

The boring parts of agent security keep doing the real work. OpenClaw PR #96216 is not glamorous: it teaches strict inline-eval detection that python3.13 -c, /usr/bin/pypy3.10 -c, PHP -B/-E/-R, and R/Rscript -e/--exec are still inline code execution. That sounds obvious. It was

OpenClaw Is Closing the Policy Gap Between Who Asked and What Tool Runs

OpenClaw Is Closing the Policy Gap Between Who Asked and What Tool Runs

Approval gates have a branding problem: they look like security controls, but too often they are just modal dialogs with incomplete context. OpenClaw PR #96211 is interesting because it goes after the field most agent platforms quietly hand-wave: requester origin. Not just “what tool is about to run,” but who

Copilot CLI GA Makes the Terminal an Agent Workbench, Not Just a Prompt Box

Copilot CLI GA Makes the Terminal an Agent Workbench, Not Just a Prompt Box

GitHub’s new Copilot CLI terminal interface is generally available, and the least interesting thing about it is that it has tabs. The interesting part is what those tabs imply: the terminal is becoming an agent workbench where GitHub context, MCP servers, skills, plugins, hooks, custom agents, approvals, and repo

NVIDIA OpenShell Is the Interesting Part of the Agent Toolkit Story

NVIDIA OpenShell Is the Interesting Part of the Agent Toolkit Story

The agent market has spent too much time pretending the hard problem is choosing the smartest model. It is not. The hard problem is giving an agent enough authority to be useful without giving it enough authority to become a root-cause analysis document. NVIDIA’s Agent Toolkit announcement is interesting

OpenClaw’s Approval Flow Has a Routing Bug, Which Is Exactly Why Approval Gates Need End-to-End Semantics

OpenClaw’s Approval Flow Has a Routing Bug, Which Is Exactly Why Approval Gates Need End-to-End Semantics

Approval gates are supposed to be the part of an agent platform where everyone can finally relax. The model wants to run something risky, the runtime pauses, the human approves or denies, and the system continues under supervision. OpenClaw issue #96103 is a useful reminder that this picture is too

Claude Code 2.1.186 Tightens the Permission Story Around Background Agents and MCP

Claude Code 2.1.186 Tightens the Permission Story Around Background Agents and MCP

Claude Code 2.1.186 is not one big feature. It is a cluster of small operational fixes around the places coding agents stop being demos and start becoming systems: MCP authentication, background-agent permission prompts, named subagent policy enforcement, browser isolation, usage-based cost display, retry caps, and workflow loop termination.

Claude Code’s Managed-Settings Bug Is a Security Boundary Wearing a Config Hat

Claude Code’s Managed-Settings Bug Is a Security Boundary Wearing a Config Hat

A security boundary that disappears quietly is worse than one that fails loudly. The new Claude Code report about Linux managed settings is not interesting because JSON precedence is inherently thrilling — it is interesting because the affected layer is supposed to be the boring, administrator-owned place where “no” actually means

Grok Build’s /goal Mode Is xAI’s Agent Handoff Primitive — and Its Next Safety Test

Grok Build’s /goal Mode Is xAI’s Agent Handoff Primitive — and Its Next Safety Test

xAI’s new /goal mode for Grok Build looks small if you squint: one more slash command in a terminal coding agent. That is the wrong read. The interesting part is not the syntax. It is the contract change. Grok Build is no longer only asking developers to supervise a