What it may solve
Adds an `auto` permission preset between workspace-write and danger-full-access: a classifier grants routine sandbox escalations once, while dangerous or uncertain requests still go to a human.
Imported third-party catalog description; not a Registry verification conclusion.