Your AI Safety Model Can't Be Popups

Every serious AI coding workflow eventually teaches you two things about the little approve button. First, the button is useful. If an agent is about to run a shell command, edit a file, install a package, or call a tool, I would rather see the question than not see it. Second, the button is nowhere near enough. Approval prompts fail in both directions. They are too weak to be the whole safety…