Hey, thanks for the report. This is a known bug and the team is already looking into it. Right now, Plan Mode can sometimes jump straight to making changes instead of waiting for approval.
You can see the related report here: Composer 1 agent edits files in Plan Mode instead of only proposing a plan
The team is aware of the issue and is working on a fix.