Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallFor Antigravity 2.0 on macOS or Linux, start with the Default permission preset, keep each project limited to the folders it needs, and leave network access off unless the task genuinely requires it. Choose Request Review when you want to approve every terminal command. Reserve Turbo for work where you deliberately accept unrestricted commands and full filesystem access.
Those presets are not just convenience settings: they change command approval, sandbox isolation, filesystem scope and, indirectly, network exposure. Global preferences provide the baseline, while a project can inherit or override that baseline. The exact controls depend on your operating system and installed version, so verify what your Settings page actually shows before applying a path from this guide.
As an Amazon Associate I earn from qualifying purchases.
Check your platform and Antigravity version first
Google’s updated fine-grained permission system is documented for macOS and Linux. Windows is described as using older controls, including separate settings for terminal execution, sandboxing and access to files outside the active workspace. The documentation is not perfectly consistent: the Antigravity 2.0 Agent Settings and sandbox pages describe Default as sandboxed, while the general Settings page says sandboxing is disabled by default. Those statements may refer to different releases or settings surfaces.
Before changing anything, open your installed Settings page and note:
#1 Best Overall
- [Ultra-Lightweight Ear Buds Designed for Small Ears] Each earbud weighs only 3.7g and features a compact, ergonomic in-ear design made especially for small ears. Secure, low-profile, and comfortable for workouts, all-day wear or overnight sleeping.The ultra-slim profile sits flush in your ear with no hard edges poking or rubbing, so you can even sleep on your side without discomfort.
- [Immersive Stereo Sound with TOZO OrigX Technology] TOZO OrigX tuning delivers clear vocals, balanced mids, and natural stereo sound for music, podcasts, and videos.
- [Long Battery Life for Daily Use] Get up to 7 hours of playtime on a single charge, with up to 32 hours total using the charging case—ideal for workdays, commuting, and extended listening sessions.
- [Bluetooth 5.3 & Stable Connection] Bluetooth 5.3 provides fast pairing, stable wireless performance, and reduced dropouts as you move around home or office.
- [Deep Bass with Clear Vocals] High-performance drivers produce punchy bass while keeping vocals clean and detailed for everyday listening.
- Your operating system.
- The Antigravity version shown in its About or update screen.
- The global permission preset.
- Any project-specific override.
- Whether a separate sandbox toggle or strict-mode control is present.
Do not assume that a setting documented for macOS or Linux exists on Windows, or that a sandbox is automatically active merely because the word appears in documentation.
Understand what each permission preset does
Open Settings > General > Permission Settings to set the global baseline. The documented Antigravity 2.0 comparison is:
| Preset | Sandbox | Terminal commands | File access | When it fits |
|---|---|---|---|---|
| Default | On in the updated macOS/Linux system | Runs in the terminal sandbox; approval is required for commands outside it | Workspace and temporary directories | Normal development and agent-assisted editing |
| Request Review | Off | Approval is required before every command | Workspace only | High-oversight work or unfamiliar repositories |
| Turbo | Off | Unrestricted and runs without prompting | Full filesystem | Only when you intentionally accept maximum access |
Default is the sensible starting point because routine commands can operate inside the sandbox while operations that cross its boundary require a decision. It is not a promise that every command is harmless: a command may still read sensitive data, modify the project, or request an action outside the sandbox.
Request Review trades speed for visibility. Because the sandbox is disabled and every command needs approval, it is useful when you are evaluating an agent, handling a sensitive repository, or want to inspect commands one at a time. Expect interruptions during normal builds and package-manager operations.
Turbo removes both isolation and prompts. The documentation characterizes it as full access with no isolation or restrictions. Use it only for a deliberately controlled environment, never as the ordinary default for a project containing credentials, personal files or unrelated repositories.
Rank #2
- 【IP68 Waterproof Multifunctinal Smart Watch】Torjalph fitness activity tracker smart watch is IP68 waterproof technology ,you can wear it when swimming,handwashing,it's rain-proof which means that you perform multiple exercise modes outside without worrying about sweat or rain corroding your fitness smart watch,and this watch equipped with a 230 mAh large capacity battery magnetic charging ,and this sports activity tracker watch can be used 5-7 days If fully charged.
- 【Larger 1.83'' Full Screen Watch & Multi-dial Selection】1.83 inch full HD color touch screen smart watch for men / women provides excellent 240*284 resolution image quality ,This Bluetooth smart watch offers a better touch experience and remarkable immersion and ,more than 200 watch faces for you to choose from App"Da Fit ", you can change the dial style according to your mood to wear keeping the world on your wrist
- 【Accurate Activity Tracker Smart Watch 】sports watch activity tracker uses sweat and dust resistant breathable silicone strap, our Fitness Tracker Smart Watch for Android iOS Phones supports 12 sports modes,walking,running,bicycle,swimming,badminton,basketball,football,rope skipping. This bluetooth calls smart watch for men women is lightweight and stylish, bringing more convenient and relaxing sports experience while also providing more protection.
- 【Your 24 Hour Personal Daily Health Monitor】Fitness watch for women men full touch screen IP67 waterproof bluetooth smartwatch for Android iOS Phones with heart rate blood pressure monitor multifunction Andriod smart watch with steps counter sleep monitor sports fitness watch, monitoring blood oxygen saturation allows you to understand your physical condition in real time to track fitness progress ,to know your health status in time.
- 【More Functions Bluetooth Call Smart Watch】This fitness activity smart watch full screen for iPhone and Android phones includes a bunch of new features including:The bluetooth smart watch can hang up the phone, receive and display WhatsAPP /Text /Facebook /Twitter /Messenger reminder.Support sedentary reminder, alarm clock, stopwatch, timer,weather information,music control, remote camera control compatible with Android 5.0 and above or iOS 9.0 and above smartphones.
When a project should override the global preset
Use Settings > Projects when one project needs a different policy. Leave projects on Inherit General unless there is a concrete reason to diverge. A project-specific policy is easier to audit when it is an exception rather than a second, unexplained global standard.
For example, a public sample repository can inherit Default, while a project that manipulates production configuration can use Request Review. Record why the exception exists so another person does not later switch it back without understanding the risk.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Use narrow permission rules, not broad approvals
Antigravity evaluates sensitive tool operations through Deny, Ask and Allow lists. Google describes this as a “unified fine-grained permission engine” for sensitive tool operations. The precedence is strict:
- Deny overrides Ask and Allow.
- Ask overrides Allow.
- Allow applies only when a more restrictive rule does not match.
This ordering means a broad Ask rule can continue to prompt even when a narrower Allow rule appears to permit the same operation. Start with the smallest useful target: one command pattern, one directory, one URL domain or one MCP target. Expand only when a real task demonstrates that the narrower scope is insufficient.
How file grants behave
A write_file grant also implies read access to that same path. You do not need a separate read grant for a directory you have explicitly allowed for writing. Conversely, a denied read path cannot be written. Keep secrets, credential stores and unrelated home-directory folders outside the allowed scope rather than trying to compensate with a complicated set of exceptions.
Rank #3
- [Low Noise High Fidelity] New bee guitar cord with 22AWG oxygen-free-copper center conductors provides enhanced signal transfer, the PVC insulation material and the high-density stranded copper double shield provide noise rejection for quiet operation
- [Ideal for Choice] New bee 1/4 straight and right angle metal connectors, ensures a secure connection in any instrument, pedal, or amp jack. L shape great fro on stage guitar stands
- [Wide Compatible] Suitable for mixer, power amplifier, microphone, effector, decoder, equalizer, electoronic organ, electric guitar, electric bass and other electronic equipments. Widely used in the installation of smart home, karaoke speaker, professional stage audio, etc
- [Easy Disassemble] Making incidental repairs quick and easy! Very nice, flexible cable
- [Dont Hesite to Order] 24 hours customer services and professional technology team are standing by
When an approval card appears, Antigravity may let you edit the target to expand the scope for file, URL or MCP permissions. Treat that control as a deliberate policy change, not as a convenience button. Terminal command scope editing is not supported, so review the command itself and choose an appropriate preset or rule instead of assuming you can safely broaden it from the prompt.
Set the workspace boundary deliberately
The workspace is the main containment boundary for an agent. The Default sandbox begins with access to the workspace and temporary directories. Adding unrelated folders for convenience weakens that boundary and makes accidental edits or disclosure more likely.
Choose a project location
Antigravity can work directly in a local folder or through a Git worktree. If the selected folder is not a Git repository, it falls back to local use. Select the narrowest repository or worktree that contains the files needed for the task; do not select your entire home directory just to avoid opening another project later.
- Open Settings > Projects.
- Review the folder assigned to the project.
- Remove parent directories that contain unrelated repositories, downloads or personal documents.
- Choose a specific local folder or Git worktree when you need isolation between branches or tasks.
- Confirm whether the project is set to Inherit General or has its own permission behavior.
Standalone conversations use a local scratch directory rather than a named project. Treat that scratch location as temporary working space: do not place credentials or irreplaceable files there, and check where generated artifacts are written before sharing them.
Grant paths only when the task needs them
If a build needs a cache, fixture directory or generated-output folder outside the initial workspace, grant that exact path rather than its parent. Remember that a write grant carries read permission for the same path. After the task, remove a grant that was only needed for a one-time operation.
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Rank #4
- Digital Family Calendar: BSIMB digital calendar wall touch screen puts an end to your chaotic life. Designed for busy families, the digital calendar keeps you organised and in step with your family. Assign different colours and tasks to each family member to make family scheduling easier and more intuitive.
- Easy Setup and Auto-Sync: Plug in, connect to WLAN and auto-syn your electric calendar in minutes. Digital wall calendar compatible with Google calendar, iCloud calendar, Outlook calendar, Cozi calendar and Yahoo calendar. Add events directly on the device or through the ecalendar app. Electronic calendar stays current whether you're at work or traveling—no manual updates needed.
- All-In-One Home Assistant: Smart calendar builds habits and encourage independence with personalised chores. Display daily meal plan to reduce the daily ‘What's for dinner?’ stress. To-do lists keep track of everything you want. Turning chores into valuable achievements with stars and rewards, making life easier and more enjoyable.
- Manage Anytime Anywhere: BSIMB electronic calendar for family stay connected with the powerful ecalendar app. Access and manage your digital wall calendar anytime, anywhere with free features like stars & rewards, photo screensaver, chore charts, meals plans, to-do lists etc. Electronic planner paid features like Magic Import tailor advanced tools for users with special needs.
- Stay in Touch with Loved Ones: Share photos or videos from your phone to electronic wall calendar with app, instantly update your life moment, and keep in touch with your family, especially those who are far away; you can also surprise your smart calendar digital wall by sending him a wish card; it's also great for keeping tech-illiterate elders in touch with the youngsters.
Keep source, generated output and secrets in separate directories where possible. This makes a narrow rule practical: the agent can write build artifacts without receiving access to a directory containing signing keys, environment files or unrelated customer data.
Decide whether the task needs network access
Under the updated macOS/Linux Default setup, sandboxed commands have no network access by default. That is useful for reproducible builds and limits data exfiltration, but it can block package installation, API calls, remote documentation and repository operations.
Web reading and browser interaction are different permissions
The read_url permission governs web reading and browser navigation. Interactive browser actions such as clicking or typing are governed separately by execute_url. Granting one does not automatically authorize the other.
Approved read_url domains also contribute to the sandbox’s outbound network allowlist. Allow only the domains required for the workflow, such as a specific package registry or documentation host, rather than opening broad internet access. An unconfigured web or MCP action defaults to Ask, so the first request should be a prompt for a targeted decision, not a reason to create a global Allow rule.
Recommended Free Tools
Common network decisions
- Offline code editing: leave network access disabled.
- Dependency installation: allow the package domains needed by the project, then revoke or narrow the grant if the installation was one-time.
- Documentation lookup: permit reading the required domains without granting interactive browser execution.
- Browser testing: separately review
execute_url, because clicking, typing and script-driven actions have different consequences. - MCP integrations: keep unconfigured targets at Ask and allow only the specific server or operation needed.
Consider strict mode for high-control work
The Settings documentation describes strict mode as a stronger control set. When available on your platform and version, it requires review for terminal commands, browser JavaScript and artifact actions; respects .gitignore; disables access outside the workspace; activates sandboxing; and denies network access.
Strict mode is appropriate for reviewing an unfamiliar agent, working with proprietary code, or demonstrating that an operation cannot leave the selected workspace. It may also block legitimate workflows that depend on ignored files, external tools, remote services or generated artifacts outside the repository. Confirm that the strict-mode controls are present in your own interface before relying on them.
Windows uses a separate control model
Windows documentation describes an older policy rather than the updated macOS/Linux permission engine. In Windows Settings, Agent non-workspace file access is a separate control. By default, access is limited to active project folders and application-local data. Enabling broader access should be an intentional choice, because it expands what an agent can inspect or modify outside the project.
Windows also exposes separate terminal execution and sandbox settings. Follow the labels shown in your installed Windows build instead of importing the macOS/Linux preset table. If a control is absent, do not infer that it is enabled; verify the effective behavior with a harmless test in a disposable folder.
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Repair Windows errors before they cause bigger problemsFix Now →Verify the effective policy before trusting it
A global preset, project override, path grant and platform-specific toggle can all affect the result. Use this checklist after changing settings:
- Open the project and confirm its folder or worktree.
- Check whether the project says Inherit General or names a project-specific policy.
- Read the active preset and any visible sandbox toggle.
- Inspect Deny, Ask and Allow entries for overlapping paths, commands, URL domains and MCP targets.
- Run a harmless command that reads a file inside the workspace.
- Attempt a harmless read of a deliberately excluded path and confirm that Antigravity blocks it or asks, as expected.
- For network-dependent work, test the exact approved domain rather than assuming all outbound traffic is available.
- Review approval cards before accepting an expanded target.
If a command keeps prompting
First check for an Ask rule that is broader than the Allow rule you expected to match; Ask has higher precedence. Then check whether the command is outside the sandbox, whether the project has overridden the global preset, or whether the operation requires a separate permission such as execute_url. Do not switch to Turbo merely to eliminate prompts.
If a build cannot see a file
Confirm that the file is inside the selected workspace or temporary directory and that no Deny rule matches it. If the file is legitimately required elsewhere, grant the smallest containing path. A write grant includes read access, but a denied read path cannot be repaired by adding a write rule.
If an online task fails
Check whether the failure is a sandbox network restriction, an unapproved read_url domain, or an interactive action requiring execute_url. Approve the specific domain or action only after identifying which operation failed.
Free tools Windows power users keep installed
One-click scans. No signup required.
Practical starting policies
| Work pattern | Preset | Workspace and permissions | Network |
|---|---|---|---|
| Everyday coding in a trusted repository | Default | One repository or worktree; narrow write grants for generated output | Off unless needed |
| Reviewing an unfamiliar project | Request Review or strict mode when available | Workspace only; inspect every command and artifact action | Off initially |
| Dependency or documentation task | Default | Keep the project boundary narrow; allow only required URL domains | Targeted read_url grants |
| Highly automated, disposable environment | Turbo only by deliberate choice | Use a throwaway workspace with no sensitive files | Still review network needs separately |
The safest useful configuration is therefore not the one with the fewest prompts. It is the one whose preset, workspace, path grants and network rules match the task and no more. Recheck those four elements whenever you switch projects, operating systems or Antigravity versions.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
