# Your first approval on one laptop

Hold your agent's command on your laptop until you approve it.


Youusethestandaloneprofile,soStrazarunsonyourlaptopandsignsyouinitself,withnoexternalidentityprovider.[Howitworks](https://docs.straza.ai/evaluate/how-it-works/index.md)explainsthemodel,and[Tryitononelaptop](https://docs.straza.ai/evaluate/try-it-on-one-laptop/index.md)walksthroughallofthesesteps.-[Getthebinaries](https://docs.straza.ai/evaluate/try-it-on-one-laptop/index.md#before-you-start):Putstrazad,strazactlandstrazaonyourPATH,onamachinewithnoStrazapackageormanagedinstall.-[Starttheserver](https://docs.straza.ai/evaluate/try-it-on-one-laptop/index.md#start-the-server):Runstrazadonthestandaloneprofile.Itsfirststartprintstheadminpasswordandaddsastarterrulethatdeniesarecursiveforceddelete.-[Signintotheconsole](https://docs.straza.ai/evaluate/try-it-on-one-laptop/index.md#sign-in-to-the-console):Signinastheadminfromthefirststart,andmintatokenforstrazactl.-[Addalice,thepersonyouragentworksfor](https://docs.straza.ai/evaluate/try-it-on-one-laptop/index.md#add-alice):Addthepersonyourmachineenrollsas,withtherolethatletstheirbrowserapprove.-[Enrollyourmachine](https://docs.straza.ai/evaluate/try-it-on-one-laptop/index.md#enroll-this-machine-as-alice):StarttheStrazaserviceandrun`strazaenroll`,whichsignsyouin.-[ConnectClaudeCode](https://docs.straza.ai/evaluate/try-it-on-one-laptop/index.md#connect-claude-code):`strazainstallclaude-code`installsthehookforyouruser,andthestarterrulethendeniesacommand.-[Holdacommandforyourself](https://docs.straza.ai/evaluate/try-it-on-one-laptop/index.md#hold-git-push-for-yourself):Arulewiththemodeconfirmholdsacommanduntilyouapproveit.-[Turnonapprovalsinthisbrowser](https://docs.straza.ai/evaluate/try-it-on-one-laptop/index.md#turn-on-approvals-in-this-browser):Ontheself-servicepage,underThisbrowser.-[Approveyouragent'scall](https://docs.straza.ai/evaluate/try-it-on-one-laptop/index.md#approve-your-agents-call):Strazadeniestheagent'scallatoncewithareference.Approveitontheself-servicepageunderRequests.Anidenticalretryinthesamesessionwithin60secondsofyourapprovalrunsonce.-[RemoveStrazafromthismachine](https://docs.straza.ai/evaluate/try-it-on-one-laptop/index.md#remove-straza-from-this-machine):Removethehookswhiletheservicestillruns,thenstoptheserviceandtheserveranddeletetheirstate.-[Whatthisprotectsononelaptop](https://docs.straza.ai/evaluate/try-it-on-one-laptop/index.md#what-this-protects-on-one-laptop):Itcatchesamistakebytheagentorapromptinjectionagainstit.Itdoesnotstopyou,becauseyouapprovethecallsyourself.Ahookinstalledforyouruserisalsoadvisory.Next:[SetupStrazaforateam](https://docs.straza.ai/guides/set-up-straza-for-a-team/index.md)