Approvals

No sensitive action executes directly from AI output.

Actions that require consent should appear here before any external tool is called.