Owner question: host tools, high-risk OKs via the computer's own admin prompt in v1 (phone later)? #28

This is about the host-tools design (PR #26), where an agent can act on your own computers.

Question: for the rare high-risk OKs in the first version (admin rights, full rights, protected areas, turning host tools back on), should you confirm with your computer's own admin prompt (Windows UAC, the macOS authorization dialog, polkit on Linux), and the phone OK be designed later as its own piece?

Recommended: yes. The operating system itself protects that prompt. 8 of the last 13 review findings were in the phone part, and every round of fixes there turned up new problems.

Cost: for these rare OKs you have to be at that computer; with only your phone, the agent waits. Continue and normal OKs do not change. Linux desktops on X11 get no on-screen acting in the first version (Wayland works).

Other choice: keep the phone OK in the first version. It then gets its own design and review rounds first, and host tools ship later.

This replaces pending question 1 in the doc (§17). Until you answer, the doc is written with "yes".

🤖 Generated with Claude Code