I find it to be quite cautious too. Beyond the access prompts, the model itself tends not to take as much initiative when using a local machine. It often hands tasks off to me when it needs a web browser, for which I say “you drive” and it will. It’ll ask me to confirm in writing to perform an action on a local machine - sometimes to auto classifier knocks it back because I didn’t use the exact words. An example for this recently was pushing a new release to an internal TestFlight group - took several attempts but it wouldn’t accept so I did it manually, which a local session has no complaints doing.

[flagged]