Auto-approve is off by default and set per tool under FlitAgent → Settings. It applies only to low-risk, reversible changes; for update_post only to drafts and pending posts.
Warning Destructive changes are never auto-approved, whatever the policy, and plan items are never auto-applied.
An auto-approved change still gets a preview, a receipt and a rollback like any other; the only difference is that nobody clicked Approve.