Configure what a coding agent may do without asking, balancing autonomy against the cost of an unwanted action. Use when setting up an agent's permissions for a project.