The merged change deletes the approval commands, the watchers, and the policy files that pull request 11874 added. A migration then cleans an edge or development machine that already turned the feature on. It stops those watchers, puts Bolt's authorization mode back to the saved original, and returns accessories that Omarchy enrolled, from manual approval to automatic. It does not change a manual policy someone else set. ryanrhughes wrote that without that return, docks stay unauthorized.

The migration removes the USB-at-boot kernel parameter and rebuilds the boot entries. It drops USBGuard, which blocks new USB devices, only when Omarchy owns that install. ryanrhughes wrote that a test on his N1x started with USBGuard enforcing, Bolt disabled, a CalDigit TS4 on manual approval, and 10 root hubs denying new devices. ryanrhughes wrote that afterward USBGuard was gone, Bolt was enabled, the dock was automatic, and the hubs allowed a device.

Pull request 14936, which would remove the menus and keep the approval library, was still open. ryanrhughes opened and merged pull request 15091 into quattro. Version 4.0.4 contains neither the approval feature nor this revert.