PRODUCTION SCENARIO
A DevOps assistant inspects Kubernetes clusters and generates cleanup commands. Its toolset includes list_pods, describe_deployment, and delete_namespace, and policy says an authorized operator must positively approve any irreversible call.
Which guardrail belongs in front of delete_namespace?
Answering here is anonymous. Nothing is saved unless you sign in.
Show answer and explanation
Answer: Halt the loop and require an operator to approve the call before delete_namespace runs
An irreversible action on production infrastructure is the checkpoint case: the loop halts and an authorized operator positively approves the exact parameters before the call runs. A dry run shows what would be removed but does not stand between the agent and the real call. A ten-minute Slack window converts silence into consent, so an unattended night deletes the namespace. A confirm field the model sets itself adds a parameter without adding a second party.
Official Source: https://www.anthropic.com/engineering/building-effective-agents ↗