Skip to content

Trust

Safety and Approvals for Mac Automation

Soren asks before risky effects, prefers reversible deletion, supports a global stop action, and reports failure instead of inventing success.

Approval before consequence

Soren asks before risky effects, prefers reversible deletion, supports a global stop action, and reports failure instead of inventing success.

The guardrail classifies consequential actions before dispatch, and the approval interface gives the user a clear choice to approve or deny them.

Reversible where possible

When a user asks to delete a file, Soren prefers moving it to the macOS Trash so the action remains reversible. Irreversible command paths remain subject to the approval policy.

Verification after action

A global stop action can halt current work. After an action, Soren reports the result it can verify; third-party app state is not always verifiable, so it must report an unverified outcome instead of claiming success.

Dated evidence

Proof from the current build

Verified against

  • codeConsequential-action approval classificationcore/soren-core/src/guardrail/GuardrailEngine.ts
  • codeUser approval interfaceapps/Soren/Sources/SorenKit/UI/ApprovalUI.swift
  • codeReversible macOS Trash executorapps/Soren/Sources/SorenKit/Actions/TrashExecutor.swift
  • codeGlobal stop controllerapps/Soren/Sources/SorenKit/StopController.swift
  • testApproval and reversible-action policy testscore/soren-core/test/guardrail.test.ts
  • testApproval interface accessibility testsapps/Soren/Tests/SorenKitTests/ApprovalUIAccessibilityTests.swift
  • testReversible Trash executor testsapps/Soren/Tests/SorenKitTests/TrashExecutorTests.swift
  • testSpoken stop-action phrase testsapps/Soren/Tests/SorenKitTests/FastPathPhraseTests.swift

Requirements

Permissions

  • Accessibility for reading and operating supported interface elements

Boundaries

Current limitations

  • Third-party app state is not always verifiable; Soren must report an unverified outcome instead of claiming success.

Keep exploring

Guide

Mac Automation in Natural Language

Automate practical Mac workflows in natural language, with visible actions, approval before risky effects, and honest verification.

Early access

Want your Mac to do this when you ask?

Join the Soren waitlist. We are onboarding Mac power users in waves.