Permission is specific
An enabled action is not an open-ended permission.
Turning on a supported action only means Certifiedge may prepare that kind of action for your review. It does not allow an assistant, saved memory or background process to execute it automatically. If an action will send, create or change something, Certifiedge must show you the exact details on screen and wait for a separate approval.
One approval, one action
Changing the details means asking again.
Certifiedge freezes the action details you are asked to approve. If the recipient, subject, message or other action detail changes, the earlier approval no longer applies and a new request is required. An approved action is executed at most once, and failed side-effecting actions are not silently repeated.
Hard safety boundaries
High-impact powers stay outside this gateway.
Connected Actions cannot move money, issue credentials, change account permissions, delete protected records, freely control websites, run server commands, change databases or reach server files. Connected actions also cannot decide assessment, evidence, mastery, readiness, admission or learning access. Those boundaries remain separate even when an action request comes from an AI-supported workflow.