Soft approval: agents pause before destructive or outward actions

The soft_approval capability tells an agent to batch safe work and pause before destructive or outward-facing actions such as deleting data, pushing, publishing or sending messages. The pause is a request_approval tool call, so a waiting turn is something a host can render. record_approval writes the grant and set_approval_mode changes the level.

It is enabled at normal on the Generic and Platform Chat harnesses. The approver is resolved on the server from the authenticated message, never from what the model says, and recorded as agent.approval.requested and agent.approval.granted in the audit log.

See Soft approval. #3655