REPORTED DEVELOPMENT
Glean's run_tool write controls offer three modes: Require Glean approval, the default, fails closed when the host cannot support approval; a conditional mode asks when supported and otherwise delegates to the host; a never-ask mode delegates approval to the host. Individually registered write tools are not governed by this setting, and legacy behaviour differs. Tenant implementation was not tested.
WHY IT MATTERS TO THE MARKET
A generic tool-approval setting does not establish approval of every specific operation, target and parameter.