Approvals, by default.
Updated 2026-07-14
Beagle never speaks for a person without a human in the loop. Any action that touches the outside world - sending an email, replying to a client, changing a record in a connected tool - is drafted first and held for approval. Approval is the default, not an option you switch on.
What waits for approval
Anything outbound. Reading and drafting happen freely inside the boundary you granted; the moment an action would leave it - a send, a post, a write to a connected tool that others will see - Beagle asks first, in the thread, with the draft attached.
The three choices
When Beagle asks, you can answer at three levels:
- Approve once. This action, this time. Beagle asks again for the next one.
- Approve the tool. Every use of that tool for the rest of the conversation - useful when a job needs a dozen writes to the same place.
- Wave it through. Beagle stops asking for the rest of the conversation entirely.
Every choice is scoped to the conversation it was made in. A new conversation starts back at the default: ask first.
Why it works this way
The approval line is what makes it safe to give an AI real access. Beagle can read broadly and draft ambitiously precisely because nothing it produces reaches a client, a customer, or a connected system without a person owning the send. Judgement and accountability stay human; the drafting stops being human work.
FAQ
Can Beagle send an email without approval?
Not by default. Outbound actions are drafted and held for a nod. Within a single conversation you can choose to approve every use of a tool or wave Beagle through entirely, and that choice expires with the conversation.
Do approvals persist across conversations?
No. Approve-the-tool and wave-through last only for the conversation where you granted them. Every new conversation starts at ask-first.
What counts as an outbound action?
Anything that leaves the granted boundary: emails, client-facing replies, posts, and writes to connected tools that others will see. Reading connected data and drafting privately do not require approval.
Read next
- Connections - The grants behind every action
- Security - The full operations reference
- Enterprise - Least privilege and the peer model