Tool Approval

Permission prompt for an agent that asks before it acts: the exact command, a diff of the edit or the URL to fetch, a risk chip, the agent's reason and a live wait timer. Allow once, always allow or deny from the keyboard; decisions fold into a receipt trail.