Skip to main content
Approval rule: humans decide. Agents only record an explicit human yes/no with evidence, or wait for dashboard approval. Agents never approve their own requests.

​
The loop

1

Request

dench approval request "Deploy the new API branch?" \
  --reason "Production deploy changes public behavior." \
  --risk high --json
2

Get a human decision

Ask in chat, or point them at the approvals page from dench context --json (approvalsUrl).
3

Record it with evidence

dench approval approve <approval_id> --evidence "User said yes in chat" --json

​
Always ask before

Shipping

Merging a PR, deploying, or changing production data.

Money

Spending money or issuing refunds.

Outbound

Sending external email or messages.

Infra & secrets

Creating or modifying infrastructure, or accessing secrets.
Read-only tool actions don’t need approval. Everything that isn’t clearly read-only does. See Integrations.