Paseo Approvals

Review exact requests from trusted app connectors and explicitly approve or reject them.

An application prepares an immutable request. Choose the app in Approvals, inspect the complete plaintext preview and target, confirm review, then record a decision. Approval does not apply the request or automatically notify the agent; the application must separately enforce approval when committing.

Requires Paseo client and daemon 0.13.0 or later and a trusted local connector for each app. Configure fixed executable paths and arguments in Connector settings. The optional Standard Notes adapter requires a separately installed compatible approval bridge. No account, token or bridge is bundled.

Connectors run with the daemon user's privileges and inherit its environment. Paired trusted clients can edit connector configuration. Previews travel through the existing Paseo connection and may traverse its relay. There is no new telemetry, listener or forwarding to agent providers. Preview data remains visible in client memory and screenshots.

The plugin shows full literal text up to 256 KiB and rejects oversized previews. Changes to the app, host, settings or request clear review. The plugin is not a sandbox or an approval boundary for apps that do not enforce saved decisions themselves.

See the README for configuration, trust details and limitations.