Context wraps on fixed lines — identity, then project and branch, then the path row, which is tappable to expand and long-press to copy at a full 48dp.

No run duration is printed: runStartedAt is not guaranteed, so the row states what is true and stops.

The pending approval is the loudest thing on the screen: filled terracotta on the row that owns it. New session stays a hairline button so it is reachable without competing.

Bottom dock reserves 12pt above the home indicator, and the list pads its last row so nothing hides beneath the dock.

Chat never shows Running alone while an approval is outstanding. Approval required leads; Running is demoted to a qualifying line and only appears because other work genuinely continues.

Source labels sit above each turn as quiet uppercase text — enough structure to tell User, Claude and Tool apart without a fixed timeline gutter.

No timestamps are drawn, because none are supplied. Streaming caret stays only while the assistant is genuinely producing tokens.

Composer states its own condition in words. Every icon control is a real 48dp square even where the glyph is 12–26px.

Non-dismissible by construction. No grabber, no swipe-down, scrim taps are swallowed, and system back is intercepted — it never resolves silently as Deny. Only Deny, Allow or the timer ends this sheet, and the timer fails closed.

Three zones: a pinned header holding state, queue and countdown; a scrolling body; a pinned decision bar. Expanding Evidence grows the body only, so the actions can never be pushed off-screen.

Consequence in plain language comes first, identity and risk second, the literal command third. Permission duration and effects are distinct rows because they answer different questions.

Deny and Allow are equal-width and equal-height. Allow carries accent fill, Deny carries a 3:1 boundary, and neither animates. On a danger-class request the recommendation flips to Deny and the fill moves with it.