Approvals & trust, explained

The approval feed

The approval feed is a running record of everything your agent does — what it did, why, each step it took, and every file or resource it touched. Read-only work is logged automatically. Anything that writes to your apps, like updating a sheet or archiving an email, waits in the feed for your approval first. It doubles as an audit trail you can review or export at any time.

Your trust preset

You choose how much your agent can do on its own with a trust preset:

• Recommended: quiet, read-only lookups run on their own. Everything else — including sending, writing, and spending — asks first.
• Cautious: only quiet, read-only lookups run on their own. Everything else waits for your approval first.
• Hands-off: everyday reading and writing in your connected apps just happens. Only the six most dangerous actions stay off.

In Settings → Trust & Approvals, you decide what your agent does on its own, what it should always ask you about first, and what's completely off the table — grouped into three tiers: Always, Ask first, and Never. Anything waiting on you shows up in the approval feed.

Trust categories

Your agent's tools are also grouped into five categories you can review individually: email, connected apps, files, browsing, and system.

What starts off — and stays off unless you change it

The most powerful actions — running server commands, browsing the web as you, sending email directly, deleting files, and making payments — start blocked, and no preset ever switches them on. You can override an individual one yourself in Trust & Approvals, but they're marked as powerful and hard to undo, and we suggest keeping them on Never.