<!-- research/agent-tool-approval-patterns.md -->
# Research: Agent Tool Approval Patterns
Research brief: Compare practical patterns for deciding when an AI agent can call tools automatically and when it should ask for human approval.
## Questions
- Which tool actions are safe to run automatically?
- Which actions require user approval because they change external state?
- What evidence should the agent show before asking for approval?
- How should failures and partial tool results be reported?
## Evidence to gather
- Project agent instructions and existing tool-access rules.
- Product docs for skills, resources, tools, and agent creation.
- Approved external references when the project evidence is not enough.
## Resources
- `AGENTS.md`: Project-level rules for tool use and verification.
- `/agent/guides/create-agent`: Current project-agent creation and tool-selection guidance.
- `/cloud/mcp/tools/create-agent`: MCP schema for creating project agents.
## Output
- A short recommendation for default approval boundaries.
- A risk list for destructive or externally visible tool calls.
- Verification gaps where the project needs more product telemetry or policy detail.