[ux,v1.0] first pass at layering in trust checks

[michaelneale]

this has 3 levels:

0: no destructive changes, enforced
1: as before making destructive changes (prompt only)
2: as now.

via:

        let developer_system = DeveloperSystem::new();
        developer_system.set_trust_level(TrustLevel::NoDestructive);

[github-actions]

Desktop App for this PR

The following build is available for testing:

• 📱 macOS Desktop App (Universal, signed)

The app is signed and notarized for macOS. After downloading, unzip the file and drag the Goose.app to your Applications folder.

This link is provided by nightly.link and will work even if you're not logged into GitHub.

[github-actions]

Desktop App for this PR

The following build is available for testing:

• 📱 macOS Desktop App (Universal, signed)

The app is signed and notarized for macOS. After downloading, unzip the file and drag the Goose.app to your Applications folder.

This link is provided by nightly.link and will work even if you're not logged into GitHub.

[michaelneale]

cc @alexhancock not sure if this suits how you see the levels working - if level 0 is too "wings clipped"?

Copilot reviewed 4 out of 4 changed files in this pull request and generated no comments.

Comments suppressed due to low confidence (1)

crates/goose/src/trust_risk.rs:23

• [nitpick] The enum variant name 'NoDestructive' is ambiguous. It should be renamed to 'NoDestructiveActions' for clarity.

NoDestructive,

[github-actions]

Desktop App for this PR

The following build is available for testing:

• 📱 macOS Desktop App (Universal, signed)

The app is signed and notarized for macOS. After downloading, unzip the file and drag the Goose.app to your Applications folder.

This link is provided by nightly.link and will work even if you're not logged into GitHub.