+ New Run
Policies
Control safety + defaults without killing speed
Defaults
Quality profile
Require evidence for “Done”
Allow dependency installs without approval
If off, installing deps triggers an approval gate.
Network policy
Enforce allow-list when network is approved
If on, approvals without explicit limits will use the default allow-list.
Default allow-list (domains)
Comma-separated. Example: api.github.com, registry.npmjs.org