Answers from what it can read. Nothing changes.
- read_file
- grep
- list_dir
- web_search
- browser_navigate
- browser_snapshot
- bash
- edit_file
- write_file
- browser_click
- create_pull_request
Ask, Plan, Review, Build, Debug — enforced, not suggested.
Read-only modes never see a write tool. The allowlist lives in Rust, so a mode is a guarantee about what the agent can touch, not a line in a prompt. Try it.