Open it
In the archive
- Writing — Every dated piece of writing.
Archive · Article
The permission that matters is not whether a model can write a file. It is whether the model picks the destination. I moved path choice into trusted code and bound approval to the exact bytes and the exact disk state I previewed. The token is not the control. The approval prompt is.