Use approval for side effects, not for every tool callReserve human approval for actions where a wrong call would actually matter.