HUMAN VALIDATION
The agent stops and asks you.
Facing a missing fact or an irreversible action, it hands control back instead of guessing.
Ask, do not bet
The question tool is part of the foundation: it is mounted on every agent, with no configuration, and there is nothing to switch on.
The agent groups up to five questions into a single call, with suggested answers when the choices are known and a free-text field when they are not. You can skip all of them, and it has to carry on without.
Three risk tiers
The rule is written into the agent foundation, not left to the model's temperament. Reads, searches, single-record edits with explicit values: it proceeds. Several records, an inferred mapping, partial ambiguity: it states its assumption before writing. Deletes, bulk overwrites, migrations, permission changes: it requires confirmation.
And it is not allowed to split a high-risk action into small ones to avoid asking. Once confirmed, it reports back: how many records touched, how many skipped, what failed.
The thread does not get lost
The question suspends execution on the tool call, not on a timer. Nothing expires while you think.
Your answer closes the step and the agent resumes exactly where it stopped, with what you just told it. The exchange stays in the session, readable later.
Guardrails on the way in and out
Three families of checks frame the conversation: on what comes in, on what goes out, on the tools being called.
Maximum length, blocked patterns, tool allow-lists and block-lists, calls-per-minute ceilings, destructive-action detection, personal-data detection on output. Every verdict carries its severity, and the first failure stops the chain.
How it works
An agent reads a scanned contract to create the client record. The IBAN is unreadable on the photocopy.
The agent hits a critical fact it cannot infer.
It groups its questions, five at most, into a single call.
Execution stops on that call and the interface shows the form.
You answer, or you skip everything.
The step closes and the agent resumes its work with your answer.