Confirmations

Agents create pending actions. Humans approve once on a hosted page or in the dashboard.

Read a confirmation. Never returns raw serving keys.

Dashboard session only. OAuth/MCP tokens are rejected.

Dashboard session only.

Agent response includes confirmation_required, confirmation_id, payload_hash, and approval_url.
Hosted approval: /confirmations/{id}. Dashboard inbox remains available.
The creating agent cannot approve its own confirmation.
Executed exactly once. Replay, expiry, and altered payloads are rejected.