What should an approval gate for AI agents actually bind to? Lessons from the comments

My last post was about human approval for destructive MCP tools. The comments taught me more than the code did, so I want to put the points together and ask what you think is still missing. What readers pointed out Bind approval to the exact action. Hash the arguments at preview and check the same hash at execute, so a retry or a changed id can't... Weiterlesen: What should an approval gate for AI agents actually bind to? Lessons …