Your agent's approval gate is probably just a warning label
Every agent framework lets a model call a tool. Most will print something before a dangerous one. Far fewer actually stop. That gap is easy to ship without noticing, because the two states look identical in a screenshot. A card that says "this will post to Slack, approve?" and a card that says the same thing and then posts anyway render the same pixels. The difference only shows up in the…
We haven't written up this one. Dev.to has the full story — the link below goes straight to it.