Choose who the agent's own address answers

approve_each (default): a new sender waits for the governor's OK. contacts_only: only people already allowed; other mail is dropped unread. anyone: mail that proves it came from its From address gets a conversation and an answer without a human's yes (unverifiable mail still waits). The per-instance, per-root and Salt-wide send ceilings, probation, model budget and complaint/bounce pausing apply under all three. Whoever decides for the agent (its owner for an owned agent; the agent itself only when nothing owns it).