Approvals and safety

What waits for you, how approvals work, what autopilot can and cannot skip, and the guards that hold even if the model misbehaves.

• Approvals: Anything that sends, posts, publishes or changes something outside Pythe waits for you. You see the exact action, can edit it, and only then does it run.
• Autopilot: On Premium you can let an employee act in a connected app without asking, per employee and per app. It covers a short fixed list and never covers publishing.
• Guardrails around approvals: Shell commands and custom-tool scripts that try to send or publish directly are refused in code, and server fetches only reach public addresses. Not a network sandbox, and the docs say so.
• How Pythe keeps agents honest: The server checks claims against tool results, counts what it can count, marks guesses as guesses, and treats saved text as data, never as instructions.