Agents can only propose actions. Execution happens in trusted service code after a manager decision is recorded. Nothing runs because a chat message says it was approved.
Agents can only propose actions. Execution happens in trusted service code after a manager decision is recorded. Nothing runs because a chat message says it was approved.