Posts
What counts as risky, and who decides
The one rule Agent host uses to decide which tool calls an agent may make alone and which wait for a person, and how to mark tools safe.
Asking first is a feature, not a limit
Why an agent that stops and asks before risky actions is more useful than one that never does, and how to design agents so that they ask rarely.