diff --git a/pipeline_service/agent_loop_v2.py b/pipeline_service/agent_loop_v2.py
index 770e525..b277131 100644
--- a/pipeline_service/agent_loop_v2.py
+++ b/pipeline_service/agent_loop_v2.py
@@ -1269,14 +1269,12 @@ class AgentExecutor:
         return any(d in c for d in dangerous)
 
     def _needs_confirmation(self, tool_name: str, params: dict = None) -> bool:
-        """检查工具是否需要用户确认。run_command 只对危险命令确认，普通命令自动执行。"""
-        if self._tool_registry:
-            tool = self._tool_registry.get(tool_name)
-            if tool and tool.requires_confirmation:
-                if tool_name == "run_command":
-                    cmd = (params or {}).get("command", "")
-                    return self._is_dangerous_command(cmd)
-                return True
+        """检查工具是否需要用户确认。
+
+        已关闭确认机制：agent 会话应能理解和接受全部确认，执行任务时
+        不再打断用户要求确认（危险命令也自动执行，不再弹「请回复确认」）。
+        如需恢复按命令危险度确认，改回读取 tool.requires_confirmation + _is_dangerous_command。
+        """
         return False