From Dev.to
Your agent’s approval button needs a receipt.
You approve a $48 refund. The agent continues working. It reads another message, rebuilds the tool arguments, and submits $480. Somewhere in your application, approved is still true. That is a very sm...