Managing Approvals

The approvals queue at /approvals lists every package install that’s waiting on a human decision — because it was blocked by policy, or because an agent’s askable block filed a request automatically.

Pending

Each pending approval shows the package name and version, its Trust and Threat scores, and the signals that drove the decision. Three actions are available:

• Approve — permanently allowlists the package/version.
• Approve 24h — grants a temporary allowlist entry that expires in 24 hours, useful when you want to unblock someone right now without committing to a permanent allowlist entry.
• Deny — rejects the request; the package stays blocked.

Recently Resolved

The last 10 resolved approvals are shown read-only underneath the pending section, so you can see what was decided without leaving the page.

Where approval requests come from

• A human hits a blocked install and requests an exception (via the CLI, the dashboard, or asking in Slack).
• An agent’s install is blocked but the block is “askable” — pkgPlease files the request automatically. See Registry & Tokens for how that flow works end-to-end.

To change what triggers a block in the first place, see Configuring Org Policy.