In my experience Astra writes python code modifying the filesystem and then uses nix build to execute those python scripts without asking me for permission.