AI agent wire transfer approval

Wire movement is hard to unwind, so approval belongs before the transfer request reaches the bank rail.

Decision boundary

Put the Veto decision before send_wire reaches the system of record. The policy should see actor, tenant, amount or target, environment, and reason before the action executes.

Example protected action

const decision = await veto.protect({
  tool: "send_wire",
  arguments: input,
  context: {
    actorId,
    tenantId,
    environment: "production",
  },
})

if (decision.action === "deny") {
  throw new Error(decision.reason)
}

if (decision.action === "require_approval") {
  await veto.waitForApproval({ decisionId: decision.id })
}

return executeTool(input)

A good page for this search should help the reader implement one governed action, not describe abstract governance. The useful artifact is the action-level decision record.