Human decisions
Send tools can reach colleagues — so agents must surface decisions to the human before anything leaves the device. Draft tools stay always-allowed; sends wait for an explicit answer.
Kinds
| Kind | When |
|---|---|
question | Ask the user something in a handoff or reply |
confirm_forward | Confirm before forward_draft / send |
verify_contact | Confirm safety-number verification |
Host behavior
- Cursor: prefer AskQuestion when the host attaches that tool.
- Claude / ChatGPT desktop: present the same decision clearly in chat and wait for an explicit answer.
Never call send tools until the human has answered.
Next: agent overview · workflow.