Human-in-the-loop: when agents should ask permission

Reads run automatically. Safe writes notify you after the fact. Anything public, financial or destructive requires approval before it happens. That is the default, and it matches how teams actually delegate.

A gate is only useful if clearing it takes seconds. Run Pilots approval requests show the exact action, the page, a screenshot and the agent’s reasoning. Approve from the dashboard or even from the notification email.