OpenWorker: agent with approval gates

OpenWorker is an MIT-licensed desktop agent that can use local files, the terminal, MCP tools, and connected services. Its source code classifies writes, shell commands, and external connector calls as consequential work. Why it matters: A desktop agent becomes useful when it can act across real work systems. That also makes its permission boundary part of the product: OpenWorker pauses for approval before sends, calendar changes, and shell commands, and routes unattended requests to an inbox.

Try this: Inspect the repo's risk classes and approval flow, then compare them with one workflow you would automate. List the write, shell, and external actions that must stop for review.