all write actions are human-in-the-loop by default. these actions are sent to a user's inbox where they can approve/deny requests and also view the lineage of A2A conversations that led to the action being proposed. this has been super helpful for debugging agent teams without taking on any risk.

but if you want, you can configure 'fast mode' where you let your agents take all actions (read/write) without human approval.