AUTO_MODE_NOTICE_BODY = f"You switched to **Auto**. The agent can approve **routine gated actions** without asking first — for example, file edits and read-only Git commands.\n\nAnything uncertain is reviewed by {AUTO_MODE_NOTICE_MODEL_ANCHOR}. If review keeps failing, you're asked to approve.\n\nThis is **not a sandbox**. The agent still runs on this machine and can change files, run commands, and use tools when Auto allows them.\n\nThis notice appears **once** on this machine after you continue.\n\n[Learn more about approval modes](
{AUTO_MODE_DOCS_URL}
)"Default Markdown body shown on first successful Auto enable.
Auto involves two distinct roles — the model writing your code and the model
reviewing its gated actions — and --auto-classifier-model (or
[models].auto_classifier) makes them different models. This modal is the only
place that is disclosed, so the review sentence says which model reviews and
whether it is the one writing the code; "active model" would read as the latter.