Approvals

When a rule says ask, the call waits until a person answers. The agent pauses on that one step and carries on once you reply.

Where you can answer

You are	Answer in
In the agent	Its own permission prompt. See Working with your agent.
At a terminal	`memnox approvals`
Away from the desk	The Mac or iPhone app
On a team	The console's Waiting on you, or the buttons Memnox posts in Slack

At the terminal

bash

memnox approvals                # what is waiting, grouped by kind of work
memnox approve <id>             # yes, once
memnox approve <id> --session   # yes, for the rest of this session
memnox approve <id> --group     # yes, for every similar call waiting
memnox deny <id>                # no

A yes is for that exact call. It cannot be reused for a different action, target or environment.

When you are asked too often

Stop asking about one thing for a while:

bash

memnox allow gh.pr-merge --for 2h --reason "release day"
memnox allow --list
memnox allow --revoke <id>

Or see what is safe to stop asking about, based on what you already approved:

bash

memnox next --agent claude-code

Needing two people

toml

[[policies]]
name = "prod-deploy-two-people"
 
[policies.match]
actions = [ "vercel.deploy-prod" ]
 
[policies.decision]
effect = "ask"
approvers = [ "eng-lead", "security" ]
minApprovals = 2

Mac and iPhone

Answer with your fingerprint or face.

Rules

Change what needs a person.