No, it says “auto approved” after every evaluated command. Does it work? No idea, I can’t think of a time it ever stopped, but I’m also not ever doing anything dangerous with it. It does use another model to evaluate the commands though.