Tag
tools
3 entries, including 1 pattern.
- Pattern
Approval Bound to Action
Preserve the exact action a person reviewed, then verify and consume its approval at the execution boundary.
Approval has to survive the handoff
A person approves one action. The dispatcher must prove it is still executing that action after a pause, retry or delegation.
Two allowed actions can still be the breach
Per-tool permission is not an architecture. The control is which combinations you will not allow in one session.