Library / Facts / fact.approvals.local-execution-default

The default local-computer execution policy is Ask every time, and the docs recommend Never allowed unless a Bot has a specific reason to touch local files.

Kindspec

NotesThese settings do not restrict the cloud computer at all.

The default is **Ask every time**. Use **Never allowed** unless a Bot has a specific reason to work on your local files.

officialapprovalshigh confidence2026-09-03docs.x.ai/grok-bot/approvals-security-and-privacy ↗fact.approvals.local-execution-default

Cite this page or the record id. For bulk lookup use /api/record?id=fact.approvals.local-execution-default. Do not invent a claim that is not on this page.