Allow configuring a distinct, cheaper model for the auto-permission classifier instead of inheriting the session model. Default to deepseek flash (deepseek::deepseek-v4-flash) when deepseek credentials/provider are available; fall back to the session model otherwise.
Composes with the effort-floor item in the classifier-hygiene issue: a flash-class model at low effort makes Auto mode's permission gate nearly free (the gate was measured at 65% of all LLM calls in benchmark sessions before bypass). Needs: a config surface, a provider-availability probe, and cost attribution — the permission_classifier trace record (3d3d492) already carries a model field for this.
Allow configuring a distinct, cheaper model for the auto-permission classifier instead of inheriting the session model. Default to deepseek flash (deepseek::deepseek-v4-flash) when deepseek credentials/provider are available; fall back to the session model otherwise.
Composes with the effort-floor item in the classifier-hygiene issue: a flash-class model at low effort makes Auto mode's permission gate nearly free (the gate was measured at 65% of all LLM calls in benchmark sessions before bypass). Needs: a config surface, a provider-availability probe, and cost attribution — the permission_classifier trace record (3d3d492) already carries a model field for this.