From 749deee12c241c8211e0f64cd01f2c33847693f6 Mon Sep 17 00:00:00 2001 From: Sreeram Sreedhar Date: Fri, 31 Jul 2026 17:39:55 +0530 Subject: [PATCH] fix(web): say that the scheduled/borrowed limit applies to changes only "use only tools allowed individually" read as if reads were restricted too. They are not: decideToolApproval returns allow for read-class tools before it reaches the lease or unattended branches, so reads run in every context. Only changes need a tool allowed by name. Co-Authored-By: Claude --- apps/web/components/settings/company-brain-tool-approvals.tsx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/web/components/settings/company-brain-tool-approvals.tsx b/apps/web/components/settings/company-brain-tool-approvals.tsx index cc4c7995..28b339f4 100644 --- a/apps/web/components/settings/company-brain-tool-approvals.tsx +++ b/apps/web/components/settings/company-brain-tool-approvals.tsx @@ -266,7 +266,7 @@ export default function CompanyBrainToolApprovals({ )} > Raw queries and code always ask. Scheduled runs and borrowed - access use only tools allowed individually. + access can only make changes with tools allowed individually.