Change task permissions with one command

Permission modes are session-local overrides. Changing a mode does not modify the project profile.

Mode	Use it for	Boundary	Command
read-only	Scouting, audits, mapping, and reviews without source edits.	Allows read, grep, find, ls, and Piagent tools; blocks shell, write, and unknown tools.	/permission read-only
workspace-write	Normal implementation inside the repository.	Default guarded mode with protected paths, shell policy, capabilities, and verification gates.	/permission workspace-write
trusted-full-access	Automation in a trusted repository with a clearly bounded task.	Expands autonomy while retaining protected paths, redaction, integrity locks, and confirmation gates.	/permission full-access

Show permission

/permission status

Read-only session

/permission read-only

Workspace write

/permission workspace-write

Full access with a task

/permission full-access Run the trusted local verification suite.