Approving AI-initiated journal entries
AI COO T3 writes are persisted as tenant-scoped pending actions before execution. Review the stored title, summary, display fields, preview hash, argument hash, initiating principal, and expiry before deciding.
Confirm claims the action, rechecks current tenant policy and immutable preview hashes, executes the original tool, and records the terminal result. Reject records the decision without executing. The UI does not provide a Request more info state; return to the originating conversation when clarification is needed.
There is no numeric amount threshold in this contract. Catalog tier and tenant policy determine whether an action is T3 or T4. Tenant policy can promote risk but cannot downgrade catalog T4. Curated destructive T4 tools remain hard-blocked; other T4 actions require an allowed authenticated approval surface and cannot be confirmed through public MCP.
The legacy GraphQL confirm mutation fails closed. Use the pending-action page or chat confirmation path.