What is the difference between privacy dial and chat modes (ask / full-auto)?

[mkhellat]

Are --privacy and /mode the same setting? When would I use trusted with ask?

[mkhellat]

They are two dials:

• Mode (ask / auto / full-auto / plan / edit) — how much confirmation before plans and steps.
• Privacy (locked / private / trusted) — isolation and network posture for command steps.

You can combine them. Example: ask + private (default profile) confirms steps but still sandboxes. full-auto + trusted is for deliberate unattended work on a machine you accept broader access on — allow-lists still apply; trust does not lift refused-args.

Profiles (--profile default|unattended, or your own) bundle a mode + privacy together.

See Discussion #4 for egress defaults and llms.txt for the mode table.