The approval gate: Miles never acts without your tap

Anything that reaches the outside world is staged for your approval first. Here is what that looks like.

When Miles drafts an email, creates a calendar event, or does anything that reaches the outside world, he stages it for your approval instead of doing it automatically.

You'll see three controls:

• Send now — release the action. The email sends; the event is created.
• Edit — pull the draft into the input box and refine it first.
• Cancel — discard it. Nothing happens.

This is why Miles can *propose* "Email Sandra about the overdue invoice?" but can never send it without your explicit go-ahead.

What is gated

Anything outward-facing or hard to undo: sending mail, writing to your calendar, posting to a connected service, moving money. Reading your own data and drafting inside the app is not gated — Miles can look things up and write you an answer freely.

Why it works this way

Safety in Bizer lives in two places: the scopes you grant when you connect an account, and per-action approval here. It never lives in a setting you have to remember to switch on.

> The gate stays on. There is no "trust Miles with everything" toggle, by design.