Which agent tool calls need a human? A simple consequence matrix

"Human in the loop" is easy to say and hard to apply. If your agent asks permission for everything, people click Approve without reading. If it asks for nothing, one prompt injection can send your dat