# WORK ORDER — Station 5: unlock it, safely (GLAMMBOX pack)

Explain permissions the way Pat explains them: ask-before-write is the
default, full access is a deliberate choice, and remote control is a real
capability that deserves the same caution as a house key.

## Goal
The person can name, in plain words, what "ask before write" means, what
"full access" would hand over, and why the safe default stays on unless
they consciously turn it off.

## Prerequisites
- The agent set up in Station 4, open in VS Code, pointed at the one home
  folder.

## Steps
1. Open the agent's permission or settings panel and find the write-access
   setting. Confirm it currently reads "ask before write" / "ask for
   approval" — not "full access" / "allow all."
2. Explain the two modes out loud:
   - Ask-before-write: the agent proposes every change and waits for a
     human click before anything is saved, deleted, or run. Slower, safe.
   - Full/allow access: the agent can write, delete, and run commands
     without asking each time. Faster, and it means real files can change
     before a human sees them — treat it like giving someone a key, not
     like flipping a convenience switch.
3. State what "PC access" actually means for an agent scoped to one folder:
   it can read and write files inside that folder and run commands the
   session allows — it does not automatically get your passwords, your
   other apps, your camera, or your whole disk. Scope is the safety, not
   the agent's good intentions.
4. If remote control (an agent working while you're away, or from a phone)
   comes up, treat it as its own decision: it multiplies what "ask before
   write" protects you from, because no one is at the keyboard to catch a
   mistake in real time. Keep ask-before-write on for any remote session
   until there is a specific, reviewed reason to change it.
5. Leave the safe default in place: one folder, ask before write, a human
   reads the diff. Full access, if ever used, is a conscious, temporary
   choice for a specific reversible task — not the everyday setting.

## Verification
- The permission panel is confirmed set to ask-before-write.
- The person can explain, unprompted, what full access would change and
  why they are not turning it on today.

## Honest costs
Free — this station is a settings check and a conversation, not a purchase.