Agent Tool Approval Router

1. 1. Describe planned actions without credentials or customer payloads.
2. Run the deterministic risk router.
3. Require a named human approver for review actions and never execute blocked actions.

Payment, deletion, account administration, credential changes, and non-rollback writes are blocked by default.