Why doesn't the agent ask before every action?

Auto-review is on: every action is checked against your request and your rules. Ordinary work on the task goes ahead, risky steps and anything under Ask first come to you as a card, and actions unrelated to your request are blocked.

What does Always allow do?

It remembers exactly this operation: the same action in the same service with the same recipients then goes ahead without asking, but only for the same agent in the same organization. The permission lasts a limited time and ends sooner if it goes unused. Everything allowed this way is listed, and can be revoked, in Settings → Capabilities → Always allowed. Command-line and computer-control cards have no such button.

Why can't I edit a rule marked Organization rules?

Your organization administrator set it. These rules apply on top of yours, only an administrator can change or remove them, and auto-review cannot be turned off while they exist.

Approving actions

The agent reads, calculates and drafts documents on its own. When it is about to change or send something (update prices, reply to a customer, run a command on your computer), auto-review decides: go ahead, ask you, or refuse.

You set this up in Settings → Capabilities → Auto-review.

How auto-review works

Every action is checked against what you asked for in the chat and against your rules:

ordinary work on the task goes ahead without questions;
a risky action, or anything that matches your Ask first rules, comes to the chat as a card;
anything unrelated to your request, an action you did not ask for, is blocked, and the agent says so in the chat.

The card shows exactly what the agent is about to do and in which service; if the action cannot be undone, the card says so. There are three answers:

Approve: do it this time;
Reject: do not do it; the agent looks for another way or asks you;
Always allow: do it and remember exactly this operation, so repeating it for this agent in this organization stops asking. The line under the button says what will be remembered and for how many days.

The card waits for you

While the card is open, the agent waits and does not work around it. If you write in the chat without answering it, you can approve once that new turn ends: the card stays where it is.

Your own rules

Settings has two lists, one plain-language rule per line:

Allow automatically: what the agent may do without asking: "reply to 5-star reviews", "update stock in MoySklad".
Ask first: what never happens without your answer: "any email to customers", "price changes". When a rule here conflicts with an allow rule, this one wins.

Only you write rules. The Always allow button on a card adds no rule: it remembers the operation itself, and those permissions are listed separately under Always allowed on the same page, with where they apply, when they expire and a Revoke action. Commands on your computer, actions that can't be undone and changes to the agent's own rules have no such button: the agent asks every time.

Auto-review can be turned off with the Review agent actions switch. Actions that cannot be undone (an email, a message to a customer, a payment, a deletion) then come for approval every time.

Organization rules

In a work organization the administrator can set rules of their own. They appear as a separate Organization rules block:

they apply on top of yours;
only the administrator can change or remove them;
while they exist, auto-review cannot be turned off.

Work on your own computer

If you work in the desktop app, the computer has its own Routine work on this computer setting:

Allow nothing: the agent does not open files or run commands on the computer;
Ask before changes: reading is fine, changes wait for your answer;
Allow without asking: routine work goes ahead on its own.

A card for an action on your computer also has Allow on this computer: routine work runs without questions for a few days. Protected actions ask in every mode.