Actions an agent may not take alone. Approving runs the exact tool call the agent proposed; rejecting changes nothing.