Protection is on once the approvals below are given

First install: Takumi Agent setup has opened behind this window. Close the installer and follow it: the remaining approvals end with allowing Takumi Agent to filter network content, and giving all of them is what starts protecting your installs.

Upgrade: nothing more to do. The agent has already restarted on the new version and your earlier approvals still apply — no setup window opens, and none of the prompts listed below comes back, unless you turned one down last time.

On a first install macOS asks for these, in this order. The first one you have already given, and the setup window behind this one may already be asking for the next:

1. An administrator password, to install. Given a moment ago — it is what let this installer copy the files.
2. Permission to send you notifications. Asked once, and only if you have never answered it for Takumi Agent, so the app can tell you if this Mac stops being protected.
3. An administrator password again, to trust this Mac's device certificate. The setup window asks for it, because the installer has no way to make that change itself. Nothing is inspected until it is given.
4. Allow the Takumi Guard system extension. macOS holds the extension until you allow it in System Settings; the setup window has a button that takes you to the right pane.
5. Allow Takumi Agent to add a proxy configuration. This is the approval that starts capturing your installs.
6. A second, different approval — to filter network content — for the egress lock. It follows the one above within seconds and is expected: a second thing being switched on, not the prompt before it coming back because something failed. Setup is done when both have been approved.

If your organisation manages this Mac, it may have approved some of these already, and those prompts will not appear.

When setup is done, the Takumi panda appears in your menu bar, carrying a badge in its bottom-right corner. That badge is the whole status:

• Green dot — protected: every package manager your organisation enforces is captured. It stays green when your organisation has switched some of them off, and the panel says how many.
• Amber square, "!" — needs attention: something is degraded, waiting on you, or not being reported. Nothing is known to be getting past Takumi Guard.
• Red octagon, "×" — not protected: installs may be bypassing Takumi Guard, or this Mac can no longer be trusted.

Click the panda at any time to open the panel: its header names the same state, and the rows underneath say what is and is not covered, with a button wherever you can fix something yourself.

If this was a first install and the setup window did not appear, open Takumi Agent from /Applications. If you dismissed one of the macOS dialogs, the setup window and the panel both offer a button that brings it back.