Approvals & Guardrails

TheGitAI is built so that nothing happens to your files or shell without your say-so.

Approvals

• TheGitAI asks before running shell commands or applying file edits.
• At each prompt: y approves once, a approves the rest of the session, n denies.
• -y / --yes at startup auto-approves every shell command and file edit for the whole session — use it with care.

Password prompts

If an approved sudo command needs a password, the terminal UI shows the exact command and keeps the password masked and local. The password is never sent to the model or the server.

Guardrails

• Repo containment — file and shell operations are confined to the target repo root.
• Ignore rules — vendor, generated, and sensitive directories (like .git, node_modules, and build output) are never indexed.
• Command safety — shell commands require confirmation unless -y is used, and background or long-running server processes are blocked.