Some actions shouldn't auto-fire. Payments, sends, deletes, schema changes. Mark the tool, name the reviewer — the orchestrator stops the agent and waits for a real human to decide.

Not a prompt to the model. A literal pause in the runtime. Approve, edit, reject — every decision logged.