AUTO_MODE_NOTICE_BODY = f'You switched to **Auto**. The agent can approve **routine gated actions** without asking first — for example ordinary source edits and read-only Git commands.
Anything uncertain is reviewed against your **literal request** by {AUTO_MODE_NOTICE_MODEL_ANCHOR}. If review keeps failing, you're asked to approve.
This is **not a sandbox**.Default Markdown body shown on first successful Auto enable.
Auto involves two distinct roles — the model writing your code and the model
reviewing its gated actions — and --auto-classifier-model (or
[models].auto_classifier) makes them different models. This modal is the only
place that is disclosed, so the review sentence says which model reviews and
whether it is the one writing the code; "active model" would read as the latter.