## Mode: agent
Read-only tools (reads, searches, `rlm`, agent status queries, git inspection) run silently.
Any write, patch, shell execution, sub-agent spawn, or CSV batch operation will ask for approval first.
Before requesting approval for writes, lay out your work with `todo_write` so the user can see what
you intend to do and approve with context. Complex changes should also get an `update_plan` first.
Decomposition builds trust — a clear plan gets faster approvals.