{
  "id": "capability:requires-tool-approval",
  "_kind": "Capability",
  "_file": "capabilities/capabilities/requires-tool-approval.yaml",
  "_cluster": "capabilities",
  "attributes": {
    "displayName": "Requires tool approval",
    "description": "The entity requires explicit user approval (interactive or via\nsettings) before each tool call, unless an allowlist is active.\n",
    "appliesToNodeKinds": [
      "AgentVersion"
    ],
    "category": "tool"
  },
  "outgoingEdges": [],
  "incomingEdges": [
    {
      "from": "agent-core-impl:codex.core@1.x",
      "to": "capability:requires-tool-approval",
      "kind": "supports",
      "attributes": {
        "versionRange": ">=1.0.0 <2.0.0",
        "level": "full",
        "notes": "Codex's approvalGatingPrimitive is per-call; the runtime exposes --ask-for-approval and --sandbox modes to gate tool execution. "
      }
    },
    {
      "from": "launch-config:codex.approval-untrusted",
      "to": "capability:requires-tool-approval",
      "kind": "requires_capability",
      "attributes": {
        "versionRange": ">=1.0.0 <2.0.0",
        "level": "full"
      }
    },
    {
      "from": "launch-config:codex.ask-for-approval",
      "to": "capability:requires-tool-approval",
      "kind": "requires_capability",
      "attributes": {
        "versionRange": ">=1.0.0 <2.0.0",
        "level": "full"
      }
    },
    {
      "from": "agent-platform-impl:claude-code.platform@1.x",
      "to": "capability:requires-tool-approval",
      "kind": "supports",
      "attributes": {
        "versionRange": ">=1.0.0 <2.0.0",
        "level": "full"
      }
    },
    {
      "from": "agent-platform-impl:codex.platform@1.x",
      "to": "capability:requires-tool-approval",
      "kind": "supports",
      "attributes": {
        "versionRange": ">=0.1.0",
        "level": "full"
      }
    },
    {
      "from": "agent-runtime-impl:a5c.runtime@current",
      "to": "capability:requires-tool-approval",
      "kind": "supports",
      "attributes": {
        "versionRange": "*",
        "level": "full",
        "notes": "Per-call approval is the compatibility baseline; stricter policy-engine\nand host-specific approval modes can be layered by capability profile.\n"
      }
    },
    {
      "from": "model:codestral-22b@current",
      "to": "capability:requires-tool-approval",
      "kind": "supports",
      "attributes": {
        "versionRange": ">=0.1.0 <1.0.0",
        "level": "full",
        "evidenceSourceIds": [
          "evidence:hf-model-card-codestral-22b"
        ]
      }
    },
    {
      "from": "model:codestral-25-01@current",
      "to": "capability:requires-tool-approval",
      "kind": "supports",
      "attributes": {
        "versionRange": ">=25.1.0 <26.0.0",
        "level": "full",
        "evidenceSourceIds": [
          "evidence:hf-model-card-codestral-25-01"
        ]
      }
    },
    {
      "from": "model:command-r-plus@current",
      "to": "capability:requires-tool-approval",
      "kind": "supports",
      "attributes": {
        "versionRange": ">=1.0.0 <2.0.0",
        "level": "full",
        "notes": "Open-weights model deployed via third-party providers; tool execution by convention requires approval at the agent/runtime layer.\n",
        "evidenceSourceIds": [
          "evidence:hf-model-card-command-r-plus"
        ]
      }
    },
    {
      "from": "model:deepseek-r1-distill-qwen-32b@current",
      "to": "capability:requires-tool-approval",
      "kind": "supports",
      "attributes": {
        "versionRange": ">=1.0.0 <2.0.0",
        "level": "full",
        "evidenceSourceIds": [
          "evidence:hf-model-card-deepseek-r1-distill-qwen-32b"
        ]
      }
    },
    {
      "from": "model:deepseek-r1@current",
      "to": "capability:requires-tool-approval",
      "kind": "supports",
      "attributes": {
        "versionRange": ">=1.0.0 <2.0.0",
        "level": "full",
        "evidenceSourceIds": [
          "evidence:hf-model-card-deepseek-r1"
        ]
      }
    },
    {
      "from": "model:deepseek-v3@current",
      "to": "capability:requires-tool-approval",
      "kind": "supports",
      "attributes": {
        "versionRange": ">=3.0.0 <4.0.0",
        "level": "full",
        "notes": "Open-weights model deployed via third-party providers; tool execution by convention requires approval at the agent/runtime layer.\n",
        "evidenceSourceIds": [
          "evidence:hf-model-card-deepseek-v3"
        ]
      }
    },
    {
      "from": "model:gemma-2-27b@current",
      "to": "capability:requires-tool-approval",
      "kind": "supports",
      "attributes": {
        "versionRange": ">=2.0.0 <3.0.0",
        "level": "full",
        "evidenceSourceIds": [
          "evidence:hf-model-card-gemma-2-27b"
        ]
      }
    },
    {
      "from": "model:llama-3-1-405b-instruct@current",
      "to": "capability:requires-tool-approval",
      "kind": "supports",
      "attributes": {
        "versionRange": ">=3.1.0 <3.2.0",
        "level": "full",
        "notes": "Open-weights model deployed via third-party providers; tool execution by convention requires approval at the agent/runtime layer.\n",
        "evidenceSourceIds": [
          "evidence:hf-model-card-llama-3-1-405b-instruct"
        ]
      }
    },
    {
      "from": "model:llama-3-1-70b-instruct@current",
      "to": "capability:requires-tool-approval",
      "kind": "supports",
      "attributes": {
        "versionRange": ">=3.1.0 <3.2.0",
        "level": "full",
        "notes": "Open-weights model deployed via third-party providers; tool execution by convention requires approval at the agent/runtime layer.\n",
        "evidenceSourceIds": [
          "evidence:hf-model-card-llama-3-1-70b-instruct"
        ]
      }
    },
    {
      "from": "model:llama-3-3-70b-instruct@current",
      "to": "capability:requires-tool-approval",
      "kind": "supports",
      "attributes": {
        "versionRange": ">=3.3.0 <3.4.0",
        "level": "full",
        "notes": "Open-weights model deployed via third-party providers; tool execution by convention requires approval at the agent/runtime layer.\n",
        "evidenceSourceIds": [
          "evidence:hf-model-card-llama-3-3-70b-instruct"
        ]
      }
    },
    {
      "from": "model:llama-4-405b-instruct@current",
      "to": "capability:requires-tool-approval",
      "kind": "supports",
      "attributes": {
        "versionRange": ">=4.0.0 <5.0.0",
        "level": "full",
        "notes": "Open-weights model deployed via third-party providers; tool execution by convention requires approval at the agent/runtime layer.\n",
        "evidenceSourceIds": [
          "evidence:hf-model-card-llama-4-405b-instruct"
        ]
      }
    },
    {
      "from": "model:llama-4-maverick@current",
      "to": "capability:requires-tool-approval",
      "kind": "supports",
      "attributes": {
        "versionRange": ">=4.0.0 <5.0.0",
        "level": "full",
        "notes": "Open-weights model deployed via third-party providers; tool execution by convention requires approval at the agent/runtime layer.\n",
        "evidenceSourceIds": [
          "evidence:hf-model-card-llama-4-maverick"
        ]
      }
    },
    {
      "from": "model:llama-4-scout@current",
      "to": "capability:requires-tool-approval",
      "kind": "supports",
      "attributes": {
        "versionRange": ">=4.0.0 <5.0.0",
        "level": "full",
        "notes": "Open-weights model deployed via third-party providers; tool execution by convention requires approval at the agent/runtime layer.\n",
        "evidenceSourceIds": [
          "evidence:hf-model-card-llama-4-scout"
        ]
      }
    },
    {
      "from": "model:mistral-large-2@current",
      "to": "capability:requires-tool-approval",
      "kind": "supports",
      "attributes": {
        "versionRange": ">=2.0.0 <3.0.0",
        "level": "full",
        "notes": "Open-weights model deployed via third-party providers; tool execution by convention requires approval at the agent/runtime layer.\n",
        "evidenceSourceIds": [
          "evidence:hf-model-card-mistral-large-2"
        ]
      }
    },
    {
      "from": "model:mistral-medium-3@current",
      "to": "capability:requires-tool-approval",
      "kind": "supports",
      "attributes": {
        "versionRange": ">=3.0.0 <4.0.0",
        "level": "full",
        "notes": "Open-weights model deployed via third-party providers; tool execution by convention requires approval at the agent/runtime layer.\n",
        "evidenceSourceIds": [
          "evidence:mistral-medium-3-launch"
        ]
      }
    },
    {
      "from": "model:phi-3-medium@current",
      "to": "capability:requires-tool-approval",
      "kind": "supports",
      "attributes": {
        "versionRange": ">=3.0.0 <4.0.0",
        "level": "full",
        "evidenceSourceIds": [
          "evidence:hf-model-card-phi-3-medium"
        ]
      }
    },
    {
      "from": "model:phi-3-mini@current",
      "to": "capability:requires-tool-approval",
      "kind": "supports",
      "attributes": {
        "versionRange": ">=3.0.0 <4.0.0",
        "level": "full",
        "evidenceSourceIds": [
          "evidence:hf-model-card-phi-3-mini"
        ]
      }
    },
    {
      "from": "model:qwen-2-5-72b-instruct@current",
      "to": "capability:requires-tool-approval",
      "kind": "supports",
      "attributes": {
        "versionRange": ">=2.5.0 <2.6.0",
        "level": "full",
        "notes": "Open-weights model deployed via third-party providers; tool execution by convention requires approval at the agent/runtime layer.\n",
        "evidenceSourceIds": [
          "evidence:hf-model-card-qwen-2-5-72b-instruct"
        ]
      }
    },
    {
      "from": "model:qwen-2-5-coder-32b@current",
      "to": "capability:requires-tool-approval",
      "kind": "supports",
      "attributes": {
        "versionRange": ">=2.5.0 <2.6.0",
        "level": "full",
        "evidenceSourceIds": [
          "evidence:hf-model-card-qwen-2-5-coder-32b"
        ]
      }
    },
    {
      "from": "model:qwq-32b-preview@current",
      "to": "capability:requires-tool-approval",
      "kind": "supports",
      "attributes": {
        "versionRange": ">=0.1.0 <1.0.0",
        "level": "full",
        "evidenceSourceIds": [
          "evidence:hf-model-card-qwq-32b-preview"
        ]
      }
    },
    {
      "from": "tool-server:mcp-kubernetes",
      "to": "capability:requires-tool-approval",
      "kind": "supports",
      "attributes": {
        "versionRange": "current",
        "level": "full",
        "notes": "Cluster mutations: clients MUST gate writes on approval."
      }
    },
    {
      "from": "tool-server:mcp-docker",
      "to": "capability:requires-tool-approval",
      "kind": "supports",
      "attributes": {
        "versionRange": "current",
        "level": "full",
        "notes": "Container lifecycle calls; clients should gate on approval."
      }
    },
    {
      "from": "tool-server:mcp-perplexity",
      "to": "capability:requires-tool-approval",
      "kind": "supports",
      "attributes": {
        "versionRange": "current",
        "level": "partial",
        "notes": "Read-only search; approval only at install time."
      }
    },
    {
      "from": "tool-server:mcp-tavily",
      "to": "capability:requires-tool-approval",
      "kind": "supports",
      "attributes": {
        "versionRange": "current",
        "level": "full",
        "notes": "Outbound network calls — clients should gate on approval."
      }
    },
    {
      "from": "tool-server:mcp-exa",
      "to": "capability:requires-tool-approval",
      "kind": "supports",
      "attributes": {
        "versionRange": "current",
        "level": "partial",
        "notes": "Read-only search; approval only at install time."
      }
    },
    {
      "from": "tool-server:mcp-firecrawl",
      "to": "capability:requires-tool-approval",
      "kind": "supports",
      "attributes": {
        "versionRange": "current",
        "level": "full",
        "notes": "Outbound crawl + scrape; clients should gate on approval."
      }
    },
    {
      "from": "tool-server:mcp-context7",
      "to": "capability:requires-tool-approval",
      "kind": "supports",
      "attributes": {
        "versionRange": "current",
        "level": "partial",
        "notes": "Read-only docs lookups; approval typically needed only on first use."
      }
    },
    {
      "from": "tool-server:mcp-sequential-thinking",
      "to": "capability:requires-tool-approval",
      "kind": "supports",
      "attributes": {
        "versionRange": "current",
        "level": "partial",
        "notes": "Local in-process scratchpad — approval only at install time."
      }
    },
    {
      "from": "tool-server:mcp-figma",
      "to": "capability:requires-tool-approval",
      "kind": "supports",
      "attributes": {
        "versionRange": "current",
        "level": "partial",
        "notes": "Read-mostly; approval needed when scope token grants write."
      }
    },
    {
      "from": "tool-server:mcp-supabase",
      "to": "capability:requires-tool-approval",
      "kind": "supports",
      "attributes": {
        "versionRange": "current",
        "level": "full",
        "notes": "DB and auth mutations — approval required for writes."
      }
    },
    {
      "from": "tool-server:mcp-clickhouse",
      "to": "capability:requires-tool-approval",
      "kind": "supports",
      "attributes": {
        "versionRange": "current",
        "level": "full",
        "notes": "DB queries; approval required for non-SELECT statements."
      }
    }
  ]
}