Design human approval gates

For workflow [WORKFLOW], define exact approval gates. Require a preview containing target, action, data affected, cost if any, reversibility and evidence checked. Say when approval expires and when it must be asked again. Design safe behaviour for silence, conflicting instructions, partial completion and duplicate tool callbacks. Give a short approval message template. Default to no external action when the user has not approved it.