HUMAN APPROVALS
A person signs off before risky actions run
Mark the tools that change things as dangerous. When an agent calls one, the call waits until an operator approves or denies it, and the decision goes on the record.
Approvals in Cambrian CoreOn by default
# Watch for tool calls waiting on a person cambrian approve list # Approve one, with a reason for the record cambrian approve 7f3a2c --reason "Ticket OPS-412, checked the args" # Or refuse it cambrian deny 7f3a2c --reason "Wrong customer ID"
Which calls wait
Ask a person only when it matters
Set in
Built into Cambrian Core
Use for
Running shell commands and Python code. Every call waits until an operator approves or denies it.
Security
Secure by design, not by checklist
Cambrian has no certifications yet. What it has is an architecture where access is enforced in the kernel, every decision is explained, and you run it yourself.
Self-hosted
No grant, no tool
Explained denials
Least privilege, delegated
Open source
FAQs
The agent, the tool, and a preview of the arguments it wants to call the tool with. They approve or deny it from the CLI or an operator client, and can add a reason.