Capture the proposed action.
Show what the agent wants to do, which tools it will use, and which prior memory or instruction influenced the plan.
Score the escalation triggers.
Flag high-value relationships, irreversible changes, financial impact, account access, publication, or unusual timing.
Route to the right mode.
Autonomous completion for low-risk repeat work, draft mode for judgment calls, and human approval for commitments.
Feed the policy back.
Accepted escalations should become typed rules. Rejected escalations should tighten the threshold instead of becoming one-off corrections.