The autonomy is yours
An agent that can spend your money needs limits that are checked before the money moves, not explained after. Every guardrail here is evaluated against every action, whether a person asked for it or the agent proposed it on its own.
Strictest wins, always
Rules do not average out. If one guardrail blocks an action and another only warns, the action is blocked. There is no combination of settings that quietly lets something through.
Approval is the default, not a mode you find later
Out of the box the agent proposes and you approve. Full autonomy is a per-project choice you make deliberately, and the guardrails still hold inside it.
One switch stops everything
Freezing a project halts the agent on its next turn, mid-plan if necessary. It is re-checked every turn rather than at the start, so a freeze takes effect while work is already running.