When a finalize_plan operation is approved, writes and deletes to the exact paths listed in the plan are automatically permitted for up to 15 minutes without additional prompts. The approval dialog now shows:
> "Approving also lets writes and deletes to exactly these paths run without another prompt for up to 15 minutes (file contents are not shown again; anything to any other path will still ask)."
Evidence
Plan token authorization system (search for "Approving also lets writes and deletes to exactly these paths", "approved plan expired", "path not in approved plan:")
Strings lifted out of the shipped bundle, so the claim above can be checked against them.