CLIver’s permission system governs every tool execution. You choose how much autonomy to give the agent.

Permission Modes

Mode	Behavior
default	Confirm every tool execution before it runs
auto-edit	Auto-approve file reads/writes; confirm shell and network
yolo	Auto-approve everything — use with caution

Setting Mode

~/.cliver/cliver-settings.yaml

permission_mode: auto-edit

# Or via CLI
cliver permissions mode auto-edit

Per-Tool Overrides

Grant or deny specific tools regardless of mode:

permissions:
  - tool: Read
    action: allow
  - tool: Bash
    resource: "git *"
    action: allow
  - tool: "github#.*"
    action: deny

Project-Local Settings

Drop a .cliver/cliver-settings.yaml in any project directory for project-specific permissions. These merge with and override your global settings.