Action approval manifest
Technical contract, ownership boundaries, source files, and acceptance checks for this workflow kit.
States
Initial: pending. Terminal: rejected executed Values: pending, approved, rejected, executed, failed.
Components
Confirmation, DiffViewer, ToolCall
Adapters
- Record-review operation contract · host-owned · source
Ownership
Kit provides
- Canonical payload snapshot
- Version fingerprint check
- Decision command mapping
Host provides
- Authenticated approver
- Durable signed approval
- Idempotent action executor
- Action audit and retention
External validation boundary: The host authorizes the approver and rechecks the frozen payload immediately before executing the action.
Install and run
cd examples/workflows node --experimental-strip-types action-approval/example.ts
Run from a source checkout. The browser example uses supplied local fixtures; follow these commands for the standalone reference or recipe.
Acceptance
- Payload changes invalidate approval
- A decision targets the reviewed revision
- Execution remains host-owned and idempotent
Limitations
- The recipe does not execute actions
- The non-cryptographic fixture fingerprint is a version marker, not an approval signature
- Use the assistant's persisted signed approval path for its live task writes