Web reading and approvals, under control

Organization → Capabilities has two sections: Data sources (Web fetch and Web search, both on by default) and Tool approvals (Allow “Always approve” for connector actions).

With reading or search off, the agent stops reading or searching; search is charged to the person. With Always approve on, each person can apply one connector action type on their own; off, the workspace stops offering it and the turn waits for approval. Changes reach the agent in under a minute and the screen says so.