AI tool-call approval starter

Raw model tool calls are gated first. Only approved commands reach the fake executor.

email.send requires_approval

Side-effecting actions require human review.

{
  "to": "customer@example.com",
  "subject": "Refund update"
}

refund.create requires_approval

Side-effecting actions require human review.

{
  "customerId": "cus_123",
  "amount": 250
}

user.delete blocked

Deleting users is not allowed from this agent.

{
  "userId": "user_123"
}