Eve agentDurable HITLTenant-aware
Approval-gated operations
Sensitive actions park safely until a person approves or denies the exact operation.
session.waiting
Approval policies
always()Every production deployment
once()First account update per session
conditionalRefunds of $100 or more
Authenticated boundary
Requested tenant must match ctx.session.auth.current.
Pending operation
Refund charge
ch_large · tenant/acme