Every tool call passes through the human before it fires. Five choices. Standing rules. Hash-chained audit log.
An agent wants to order 5 prints of your design. Click to simulate the agent calling the tool. The five-choice consent card appears before anything executes.
A form with data-hcl-consent="true". The consent gate wraps the tool registration automatically.
Review and revoke your consent rules. Try "Allow until I change it" or "Set a time limit" on a tool first, then open the panel.
Every consent decision — including standing-rule auto-decisions — is recorded in a SHA-256 hash chain. Persists across page refresh.