Classify the action before routing.
Separate messages, memory changes, browser actions, calendar updates, publishing steps, and financial preparation before choosing the channel.
Attach the smallest useful evidence.
Show the original message, browser source, draft, memory diff, or calendar context that explains why the agent is asking.
Offer reply verbs, not open-ended review.
Approve, edit, ask, snooze, block, remember, and rollback are easier to parse than vague confirmation requests.
Store the receipt immediately.
The system should preserve the source, prompt, reply, final action, and memory impact before the next agent step begins.