Browse

The collection

Documented entries use official, dated product imagery with a source link. Concept entries are illustrative and labeled.

Collection 01 · 3 documented entries

GitHub Copilot warning in a pull request: 'Firewall rules blocked me from connecting to one or more addresses'. It lists packages.contoso.corp with the triggering command 'apt-get install ruby-full (http block)', and offers two fixes: configure Actions setup steps, or add the URLs or hosts to the firewall allow list.

05 · GitHub Copilot cloud agent

When the agent is blocked, it says what, why, and how to unblock it

Report a blocked action as a receipt (what was blocked, which command, the two narrowest ways forward) so a security control reads as a next step, not a failure.

Blocked-action explanation

VS Code tool confirmation: 'Install Extension rust-analyzer?' with an Allow split button open showing Allow in this Session, Allow in this Workspace, Always Allow, and a Skip button.

01 · Visual Studio Code

Allow once is the big button; wider trust sits one click deeper

A split button can hold a whole permission ladder while making only the narrowest rung the reflex click.

Split-button approval

Visual Studio Code 'Fetch web page?' dialog showing a URL, a warning that web content may contain malicious code or prompt injection, an 'Allow and Review' split button with options to skip reviewing the result or allow requests to the exact path, the domain, or a custom pattern.

04 · Visual Studio Code

Two approvals for one fetch: going out, and coming back in

Split consent where risk changes direction: contacting a site risks data going out; using its reply risks instructions coming in.

Split request/response approval

Concept · illustrative, not a real product

Concept deep dives

Composite teaching examples, kept apart from the documented collection.

Illustrative mock

agent — workspace

Agent wants to edit 2 files

src/components/Button.tsx

export function Button({

- radius = "md",

+ radius = "full",

DenyAllow onceAllow for src/components/

edits: src/components/ ×

01 · ConceptIllustrative

Ask for permission by place, not by time

Scoping trust to where a change lands, not how long trust lasts, turns a recurring interruption into a single, legible decision.

Pre-execution approval