I am launching Relaticle here next Tuesday. It is an open-source CRM where AI agents can do real work on your data, and I want feedback on one design decision before launch day.

Relaticle has two trust levels. External agents (Claude Desktop, Cursor, any MCP client) authenticate over OAuth and write through 37 tools directly, like an API client. The in-app assistant is stricter: every write it wants to make becomes a proposal card, and a person approves or skips it record by record before anything lands.

The question I keep going back and forth on: is per-record approval the right granularity, or does it become noise once you trust the assistant? Would you want a "trust this kind of change" switch, or does that defeat the point?

If you run a CRM with any AI in it today, I would like to hear where you draw that line. The whole thing is AGPL and self-hostable, including the model via Ollama, so you can look at how it works rather than take my word for it.