Skip to content
Tandem Engine

Desktop Settings and Safety

Key Settings

  • Default provider/model.
  • API key management.
  • Engine endpoint and startup behavior.
  • Workspace and session scope.

Safety Controls

  • Request approvals for tool actions.
  • Deny unsafe or unclear requests.
  • Prefer least-privilege behavior for file/system access.
  1. Require approval for write/command tools.
  2. Keep provider keys per user account.
  3. Use explicit workspace boundaries.
  4. Review request logs for high-risk tasks.