AI agent action approval: gate side effects before execution
Approve, verify, or block tool calls, API writes, and file operations with a single verifyAction() — patterns for LangChain, MCP, and custom agents.
Tool-using agents are production systems. Each tool call is a commit: send Slack, delete repo, charge a card. Action approval before execution is how you keep autonomy without blind trust.
The three decisions
- Approve — low risk, policy allows, execute immediately
- Verify — hold until a human approves (console or mobile PWA)
- Block — deny and log; optionally alert ops
Integration patterns
Middleware — wrap every tool executor with verifyAction().
protectAgent() — agent adapter for LangChain-style loops.
Webhooks — fire verification.required to Slack or PagerDuty.
Example: high-value transfer
// Policy: transfer_funds → REQUIRE_VERIFICATION
// Runtime holds until operator approves in console or mobile app
// Audit row: actor, risk score, decision, timestampClone the open-source runtime on GitHub or read what is a runtime trust layer.
More: all posts · runtime trust layer · open Sanctum Console
