Approval gate

Also written: gate, gating writes, held action, HELD

Host code that pauses a write tool call until a person or policy approves it; a refused call returns a 'held, don't retry' message to the model. Only the host can guarantee a person approved an action.