'Approve All' Is How Your Agent Ships the Dangerous One

Short summary

Manual approval of every agent action causes fatigue; skipping all approvals is dangerous. The correct boundary is state mutation: read-only calls auto-approve, write calls gate for human or policy review. The author's agentproto framework implements this as a mutates property on tool definitions, with an out-of-band permission relay and programmable gate checks that scale beyond click-yes fatigue.

• •Approval fatigue and skip-all are both broken — the real boundary is state mutation
• •Read-only tools auto-approve; write tools gate for human or policy review
• •agentproto implements mutates declarations, a permission relay, and programmable gates

Generated with AI, which can make mistakes.