Permissions

Tool use is authorized on the server. Each persona has its own path scope. The workspace is reachable. Paths outside it are reachable only when they are listed under Persona → Engine → Paths outside the workspace. Vault paths set for the process stay available. Vault SOPs stay in context. A stuck tool loop stops.

Meido works in your workspace: files, a shell, and repository-aware edits. Steel Browser is installed from the setup wizard when you want pages, not only APIs.

The terminal is a separate operator shell. It requires WEB_AUTH_TOKEN and WEB_TERMINAL_ENABLED. It is not a tool the persona runs on its own.

Hooks can gate skills and scrub secrets before a reply is delivered. See Skills and Secrets.