Pre-execution blocking prevents tools marked as requiring confirmation from running until approval arrives. The agent stores pending calls instead of executing them, while safe tools continue immediately. section 6.3.7
Why the boundary matters
File deletion and payment processing must not run before approval. If three calls are pending, a user can approve two and reject one. section 6.3.7
