A human’s yes,wherever they are.
Your agents ask. You answer.
✻ Welcome to Claude Code!
/help for help, /status for your current setup
cwd: ~/Developer/api
ship build 412
⏺Bash(authz ask "Deploy the API" --verified -- ./deploy --tag 412)
· Reticulating… (4s · thinking)
> ▌
? for shortcuts
Claude Code · mbp-m5-max
Deploy the API
./deploy --tag 412
Claude Code · mbp-m5-max
Deploy the API
./deploy --tag 412
Sunday 18 October
9:41
Authzmbp-m5-max
Deploy the API
./deploy --tag 412
Touch ID or Face ID, signed by the Secure Enclave.
The command pinned by hash, checked again before it runs.
Secrets and wallet keys never leave their helper.
A signed receipt for every yes.
One line to ask.
Everything after -- is what you approve, and Authz runs it itself, only after your yes, checked byte for byte. A yes can't be spent on anything else.
authz ask "Deploy the API" --verified -- ./deploy --tag 412A payment is a permission with a price.
How it worksExperimental.
Runs on one person’s devices. Nothing is released before its security review.