CITATION — REFERENCE ENTRY
security-confirmation · wang2025sdk
- Citation
- wang2025sdk
- Claim ID
- security-confirmation
- Assertion
- The SDK separates risk assessment from enforcement using two components. A security analyzer rates each proposed tool call as low, medium, high, or unknown risk; a confirmation policy decides whether user approval is required. When approval is needed the agent halts in a waiting-for-confirmation state until the user approves or rejects, and may retry with a safer alternative after rejection. The policy can be changed during a session. A built-in pair blocks actions above a configurable threshold, defaulting to high.
- Quote
the SecurityAnalyzer, which rates each tool call as low, medium, high, or unknown risk, and the ConfirmationPolicy, which determines whether user approval is required ... the agent pauses in a special WAITING_FOR_CONFIRMATION state ... blocks actions exceeding a configurable risk threshold (default: high)
- Quote language
- en
- Locator
- section: 4.9
Available in