Gate a risky AI agent tool call with a permit, and keep a receipt

Your agent calls a payout tool. The payout goes through on the other side, but the response never...