· Agents
Computer use: an agent that can drive your Mac
Realm can drive other macOS applications through the Accessibility APIs, off until a space asks for it, refusing a list no mode can lift, and permissioned one application at a time.
A Swift helper reads and drives other applications through the Accessibility APIs; a realm-computer tool provider exposes that to a session. Both grants macOS requires (Accessibility and Screen Recording) are requested from Settings, with the reason strings that appear in the system dialogs written for Realm rather than for a generic app.
What it refuses
A fixed list is refused by name before anything is looked up: Realm itself, System Settings, password prompts, and the terminals people actually run rather than only Apple's and iTerm's. No mode lifts that list, bypassPermissions included.
What it asks
Permission is per application, and a space remembers which ones it has allowed. You can see them in Settings and revoke them there. Approving TextEdit never licenses Mail.
A menu-bar indicator says when an agent is driving. At that moment Realm is by definition not the frontmost application, so the app's own window is the one place the state cannot be shown.
Screen captures crop to the target application's own windows on the display it is actually on, so a capture cannot quietly include whatever else was open.