Keep a Human in the Loop

Autonomous does not mean unsupervised. Gate destructive actions behind approval.

**For:** All agents

Let agents read widely, but require human approval before they send emails, delete data, deploy to production, spend money, or create accounts. Most agent platforms let you configure approval gates per tool or per environment. Start restrictive and loosen only after you see stable behavior.