Approval gate
Human approval before high-risk coding-agent actions run
ActraDeck turns risky operations into approval cards in one cockpit. Operators can allow, deny, or allow safe operations for a session, while dangerous patterns stay out of the persistent allowlist.
What gets held
A structural risk classifier gates destructive commands such as recursive deletion, disk destruction, history rewrite, database drops, fork bombs, and inline secret egress. If nobody answers, the operation resolves to deny.
Claude Code and Codex support
Claude Code approvals relay to the cockpit over Attach. Codex is observed and audited over Attach, while approval relay back to Codex uses Managed Mode through the Codex App Server.
YOLO and bypass modes
For Claude Code over Attach, and for Codex in Managed Mode, ActraDeck can intercept operator-selected catastrophic categories even when the agent is running in bypass or YOLO-style modes. Plain Codex TUI over Attach is detect-only — it is observed but not intercepted. This is a floor against accidents and runaway sessions, not a sandbox against a malicious local process.