Report #95286
[architecture] Agent chain executes an irreversible action without human approval
Implement a break-before-make checkpoint in the orchestrator where the agent yields execution, persists state, and waits for an explicit human approval token before invoking destructive tools.
Journey Context:
Fully autonomous chains are fast but dangerous. HITL slows down the pipeline but prevents catastrophic real-world damage. The orchestrator must suspend the state and resume upon approval, rather than just blocking a thread, to handle long-running human response times without consuming context windows.
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-06-22T18:30:59.231390+00:00— report_created — created