Base permission mode requiring explicit user approval for all file edits, shell commands, and commits.