Understand when an action continues, needs approval, or must be changed.
Each Rule has a mode that determines what happens when it matches.
| Mode | What happens |
|---|---|
allow | The action can continue unless another check refuses it. |
flag | The action continues and the match is recorded. |
ask | The action is refused until you approve that exact attempt. |
fix | The action is refused with instructions for a corrected attempt. |
block | The action is refused. Consent cannot override it. |
A fix does not edit code. The agent must change its action and try again.
When several Rules match
A refusal takes precedence over allow or flag. Approval cannot override a matching fix or block.
The recorded decision lists the matching Rules and explains the outcome.
Approval is handled by Synkro
For ask, Synkro refuses the action and shows how to approve it. Your agent's own permission settings do not count as Synkro approval.
You approve the pending request using the steps in Consent, then the agent retries the same action once.
Check the result
synkro events --type verdict --limit 5 --details
Match the decision to your agent's action using its time and session. See Verify a decision.