Propose, don't approve.

Destructive or outbound actions are frozen here until an operator decides. New proposals arrive every ~15s.

Human approval room

Simulation · sample incidents, not live agents or key revocation.

ENCASED · 2 WAITING

DEMO-001

Production database write requires operator approval.

Reconcile draft invoices. Remove all draft records from production_db so the ledger matches the latest export.

DELETE FROM production_db.invoices
WHERE status = 'draft';

AgentProposed tool actionContext (what the agent was doing)

Rules only (no key)

Submit an action to get a risk verdict.

Nothing waiting. Agents are operating within policy.