What the approval gate is for
Last updated: 20 September 2026
The practical difference between an agent and a chatbot is that an agent's words become real events. The approval gate sits in between: consequential actions stop and ask before they happen.
Which actions get held
The criterion isn't difficulty. It's whether the action can be undone.
| Action | Hold it? | Why |
|---|---|---|
| Reading files, searching | No | No consequences |
| Editing uncommitted local files | Depends | Recoverable if it's under version control |
| Deleting files, clearing directories | Yes | Gone is gone |
| Committing, pushing | Yes | Published is hard to retract |
| Calling external APIs | Yes | The other side already received it |
| Anything that spends money | Always | Irreversible and directly costly |
Holding has a cost
Every confirmation interrupts you. Hold too often and one of two things happens: you start approving without reading, or you turn the gate off. Both mean you no longer have one.
So the goal isn't holding more — it's holding accurately.
Configuring it so it doesn't nag
Hold only what can't be reversed
If you can treat "edit a file" and "delete a file" differently, let edits through and hold deletions. In most work, edits are nine out of ten actions and deletions less than one — holding only the latter takes the noise down sharply.
Work in a clean tree
If every change is under version control and recoverable, "edit a local file" no longer needs a gate. The danger comes from irreversibility, not from the action itself.
Batch the dangerous ones
Rather than approving each deletion separately, have it list what it intends to remove and approve the batch at once. You're reviewing intent, not individual keystrokes.
When to loosen it
Once you know an agent's temperament in a project — you've seen it read before writing, and it hasn't gone off on its own — you can relax the gate for that project.
Base that on observation, not trust. Watch it run a dozen tasks, each time reading first, and you have grounds. Turning it off because "it seems smart" is a different thing entirely.
In Aiglade
Aiglade gathers pending approvals from every agent into one place, rather than making you discover them across four terminal windows. The more agents run in parallel, the more this matters — three simultaneous confirmation requests are far quicker to handle together than separately.
Related: splitting work across agents.