A Desktop terminal batch prepares every command's guard decision before the
first one runs. A decision nobody answered (/yolo, approvals.mode off, the
allowlist, a clean command) was consumed as-is, so switching YOLO or
"Approvals: off" off after the first command still ran the rest unprompted,
while the sequential path re-gates. Only human answers (and a Smart APPROVE
while Smart mode is still selected) are reused now; everything else runs the
live guard.
447fb4955d