Permissions and confirmation rules

Opening a window, reading a file and changing a file are different powers. Heedit keeps them separate.

What does not read content

Capability checks, opening an already authorized path, listing minimal recent-document metadata, revealing a Markdown location and highlighting it do not return document text to an Agent.

What asks first

A cancelled confirmation is a final answer for that request. Agents should stop rather than retrying until the user changes direction. These rules govern requests made through Heedit; a connected Agent may have separate file or network permissions outside Heedit.