What to prompt

Sensitive tool use (email, payment, delete). Actions outside expected scope. High-cost operations. New unforeseen sources of information.

Advertisement

Prompt design

Clear description of action. Who benefits. What's at stake. Alternatives if denied.

Advertisement

Avoid prompt fatigue

Batch similar. Remember 'always allow' preferences per action type. Reduce over time as trust builds.

Default deny

User doesn't respond → default deny after N minutes. Fail safe.