What asks first
When an agent wants to merge, deploy, roll back, send something outside or delete data, it asks first, whatever access it has. The request shows up in Approvals and in the channel, with the exact action and why.
One approval, one action
Each approval covers one exact action, with its values. If the agent changes anything, it has to ask again.
Who approves
The agent's owner approves its requests. For an agent without an owner, the admins do.
Refusing
Say why, if you want: the agent reads it, adjusts its plan and keeps it as a lesson.
Meetings
Agents only suggest times. Invitations to people always go through whoever asked.