Add an approval step

Add an approval before an action changes money, customer commitments, access, production systems, or a record that cannot be safely restored.

An approval request should show the proposed action, the records and policy that informed it, the expected impact, and the options available to the reviewer. The workflow waits instead of guessing. When approved or rejected, it resumes from that point with the original run context intact.

Approvals are a control point, not a substitute for narrow permissions. The agent should still have only the tools and data it needs.