Blog
ai-agentstool-useverificationsdk

AI agent action approval: gate side effects before execution

Approve, verify, or block tool calls, API writes, and file operations with a single verifyAction() — patterns for LangChain, MCP, and custom agents.

May 19, 20267 min read

Tool-using agents are production systems. Each tool call is a commit: send Slack, delete repo, charge a card. Action approval before execution is how you keep autonomy without blind trust.

The three decisions

  • Approve — low risk, policy allows, execute immediately
  • Verify — hold until a human approves (console or mobile PWA)
  • Block — deny and log; optionally alert ops

Integration patterns

Middleware — wrap every tool executor with verifyAction().

protectAgent() — agent adapter for LangChain-style loops.

Webhooks — fire verification.required to Slack or PagerDuty.

Example: high-value transfer

// Policy: transfer_funds → REQUIRE_VERIFICATION
// Runtime holds until operator approves in console or mobile app
// Audit row: actor, risk score, decision, timestamp

Clone the open-source runtime on GitHub or read what is a runtime trust layer.

More: all posts · runtime trust layer · open Sanctum Console

Build AI humans can trust.

Open the cloud console to manage runtimes and policies, or self-host the open-source runtime from GitHub.