Mode: Command
Pause
Reset
Filesystem Sandbox
Command Policy Lanes
query
parse
halt
verify
run
check
Claude Agent
Command Req
Policy Router
Hooks Layer
Deny
Ask
Allow
Approval
Execution
Cred Vaults
SSH, AWS, GNUPG
Working Dir