Permission modes

Choose how often Horme asks before local agent actions while hard safety boundaries remain in every mode.

Three modes

Ask me requests approval for routine repository work
Smart auto allows ordinary work in a trusted Horme worktree and still asks for sensitive actions
Autonomous allows additional repo-scoped development work but still asks for installs, network access, credentials, publication, and unknown actions

Defaults and project overrides

Set an account default in Agent permissions. A project can override that default, and remembered grants apply to a semantic capability such as project checks rather than an arbitrary shell prefix.

Hard boundaries

Forbidden actions remain blocked in every mode. Git worktrees and permission rules reduce risk, but agents still run under your local user account and are not inside an operating system sandbox.