Use when a proposed agent action can publish, delete, purchase, send, deploy, change access, expose data, or otherwise cause material external effects to classify risk, request specific human approval before gated actions, show exact scope, and verify the result. Trigger before irreversible, costly, sensitive, or third-party-impacting operations.
