It should ask before high-impact, irreversible, expensive, or low-confidence actions.

Human approval is useful for payments, deleting data, sending external messages, changing permissions, production deployments, or actions with legal or safety implications.