AIRGAP StudioAIRGAP Studio

Auto Approve

Configuration and usage of AIRGAP Assistant's auto-approval feature

What Is Auto Approve?

In line with the air-gapped environment policy, AIRGAP Assistant has Auto Approve enabled by default — actions such as file modifications and command execution are performed immediately without requiring a separate user confirmation. This leverages the fact that network isolation inherently blocks external data leakage, maximizing workflow speed. If stricter control is required, individual action types can be disabled.

How to Configure

  1. Click the settings icon at the top of the AIRGAP Assistant panel.
  2. Find the Auto Approve section.
  3. Select the action types to auto-approve.

Action Types Available for Auto Approve

Action TypeDescriptionDefault
File ReadReading file contentsEnabled (air-gap policy)
File WriteCreating and modifying filesEnabled (air-gap policy)
Command ExecutionRunning terminal commandsEnabled (air-gap policy)
Browser UsageUsing web browser toolsEnabled (air-gap policy)
MCP Server ToolsInvoking MCP server toolsEnabled (air-gap policy)

Because air-gapped environments are network-isolated, the risk of external data leakage is inherently blocked, so AIRGAP Studio enables auto-approve by default. In environments with stricter security policies, individual items can be disabled in the settings.

Security Considerations in Air-Gapped Environments

Air-gapped environments have network isolation, so the risk of external data leakage is low. However, keep the following in mind:

Caution: When auto-approve is enabled, the AI can modify files or execute commands without user confirmation. Use this carefully in projects with critical files.

Early development stage (free exploration)

  • File Read: Enabled
  • File Write: Enabled
  • Command Execution: Disabled

Production code work (cautious approach)

  • All auto-approve: Disabled
  • Confirm each action individually

Testing/Prototyping (rapid iteration)

  • File Read: Enabled
  • File Write: Enabled
  • Command Execution: Enabled

Auto Approve Scope Limitations

Auto-approve only applies to files within the currently open workspace. Accessing files outside the workspace requires separate confirmation regardless of auto-approve settings.