Tool-call review by a person

Before an agent runs a tool call that cannot be undone, put the call in state and ask.

{ "state": { "tool": "send_payment", "args": { "to": "ACME Ltd", "amount_eur": 18400 } },
  "questions": {
    "run": { "type": "pick", "instructions": "Run `tool` with `args`?",
      "criteria": { "run": "Run it as is", "hold": "Hold and ask me later", "other": "Something else" } }
  } }

Run only when choice is run and confidence is above your bar. The agent skill teaches agents to do this on their own.