The shape of an integration
Your agent emits a structured proposal instead of acting. A permit returns a decision identifier; a hold routes to the review surface for your tenancy; a deny stops. Carry an idempotency key in the action context and a retry can never act twice. Connectors execute permits server side with credentials your agent never sees.