human-in-the-loop
The bot wants to run rm -rf. You get a button that says no.
Destructive tool calls surface as approvals. The agent can ask questions mid-task. Tool permissions decide what's auto-approved — and what needs a human yes.