balanceUnsealedTransaction and balanceSealedTransaction were approved
without asking by default, as "prep" steps. They reserve the wallet's
coins, sign, and return a finished transaction that a dApp can submit
through any node itself, never calling submitTransaction (the step that
prompted). Verified on a ledger-8 localnet: a dApp connected to plain
`mn serve`, with no terminal, had the wallet fund and sign a payment of
1 NIGHT to a third party.

Balancing now prompts like any other write, and is rejected without a
terminal. --approve-all still approves everything; --no-auto-approve-reads
keeps its meaning for read methods. The serve header shows whether
balancing is auto-approved. mn contract and mn test start their own
server with --approve-all and are unaffected.

Claude-Session: https://claude.ai/code/session_01XQWkwdzqCkXVWeFrvJZ8RQ