What
The permission request sent to SDK hosts over the control protocol carries an optional flag saying the prompt must default to no. A terminal-style prompt opens on the decline option and accepts no digit shortcut, and hosts drawing their own approve buttons are told not to pre-select approve.
Details
- the field is optional, so requests without it keep the existing behaviour
- it is advisory for custom hosts: the schema states the expectation rather than enforcing it
Evidence
"True when the ask must not be approvable by a single stray keystroke (PermissionAskDecision.defaultToNo): a terminal-style prompt opens on its decline option and takes no digit shortcut. Hosts rendering approve options should not pre-select approve when set."
Strings lifted out of the shipped bundle, so the claim above can be checked against them.