Making agent approvals easier to live with

说明与用途

通过本地 Windows Hello、远程 ntfy 通知和短期批准记忆，改进 Doberman 的批准工作流程，保持安全防护而不频繁中断。

问题

Frequent approval prompts from coding agents interrupt workflow, causing friction and discouraging guardrail usage.

结果

By combining local Windows Hello, remote ntfy approvals, and short‑term approval memory, developers can keep Doberman guardrails enabled with minimal interruption, while still having a clear recovery path for tainted sessions.

工作流

• Enable Windows Hello for supported two‑factor challenges on the laptop.
• Configure ntfy to send approval notifications to the phone for remote actions.
• Set preference order so Hello is checked before ntfy when both are available.
• Use the "doberman taint clear" command to recover from sticky taint without restarting the agent.
• Run "doberman tune" to review AUTH reasons and approval history for fine‑tuning.
• Measure time spent on approvals and recovery to evaluate impact.

证据

Windows Hello can supply the proof for a supported two‑factor action challenge. Once the method is available and enabled, the device verification flow can replace entering a TOTP code.

来源

When you're away from the laptop, ntfy can bring the pending action to your phone with Approve and Deny buttons.

来源

For eligible repeats, approval memory remembers the exact action for five minutes after a qualifying proof.

来源