You set this per thread. A new thread starts in **Full access**, with Plan first off.

**Auto.** Routine actions run on their own. Risky actions stop and ask you first.

**Supervised.** Borg asks before running commands and before changing files.

**Full access.** Commands, edits, and access to files outside the project run without asking. This is the default, and it is shown in amber so you can see it is on.

On mobile there is a fourth level, **Auto-accept edits**: file changes apply and commands still ask. Web and desktop do not offer this level.

## Approvals

When Borg needs your OK, it asks in the conversation. You get **Decline** and **Approve**. You can also allow the action for the rest of the session, so it does not ask again for the same kind of action.

## Plan first

Plan first is a switch, not an access level. Turn it on and Borg researches the job and proposes a plan. It can read and search. File changes are refused until you implement the plan. You can write feedback to refine the plan, or leave the feedback blank and implement it as it is.

## Restore files

To get files back, open the thread action menu and choose **Restore workspace from snapshot**. This replaces the files with the newest sealed snapshot, after you confirm. It is available on web and desktop. It does not rewind the files to any earlier turn you pick.