Transparency Dock & Approval Gates
Granular permission controls, approval gates, and execution safety in BhaiCode Desktop.
BhaiCode Desktop uses the Transparency Dock to monitor, intercept, and gate all agent tool calls before execution.
Risk Classification Tiers
1. Safe (Read-Only)
- Reading file contents inside the open workspace directory.
- Searching symbols, grepping code, and listing directory contents.
- Inspecting Git status and diffs.
- Action: Executed automatically without interrupting your flow.
2. Workspace Modifications
- Creating new source files or editing existing files inside the project.
- Action: Executed and staged in the Visual Diff Viewer for your review.
3. High-Risk / System Operations (Gated)
- Running shell commands in the terminal (
npm install,docker run,rm -rf). - Modifying files outside the workspace root.
- Git remote write operations (
git push). - Action: Intercepted by the Approval Dock. The agent pauses until you choose an action.
The Approval Prompt
When a high-risk command is intercepted, the dock displays:
- The Exact Command: Command line, working directory, and environment flags.
- The Stated Reason: Why the agent believes this command is required.
- Controls:
- Approve Once: Allows this specific run.
- Always Allow for Session: Whitelists this command pattern for the duration of the current task.
- Deny & Provide Feedback: Cancels the command and sends your explanation back to the agent so it can find an alternative approach.
Was this page helpful?