For low-risk, internal-only actions, requiring human review on every single instance is itself a bottleneck research found production deployments now avoid for this class of action.
Escalates automatically if the action's blast radius exceeds a configured threshold — customer-facing or externally visible actions never reach this pattern, they route to AGT-D04 instead.
Execute an action classified as customer-facing, financially consequential, or outside its explicitly scoped tool set.
Approved, governance-cleared Agent Action; scoped tool access
An executed action with a full provenance record