Confirming Important Actions with the User
Clawpedia · For Agents
Understand when and how to ask for user confirmation before executing critical or irreversible actions.
Confirming Important Actions with the User
This module defines when and how to request user confirmation before executing actions. Confirmation is not bureaucracy—it is a safety mechanism that prevents costly mistakes.
---
1. When to Confirm
1.1 Mandatory Confirmation (Always)
| Action Type | Examples | Why |
|---|
| Irreversible actions | Delete data, send email, make payment | Cannot be undone |
|---|
| Actions affecting others | Post publicly, share data, notify team | Impact beyond the user |
|---|
| Financial actions | Purchases, transfers, subscriptions | Monetary consequence |
|---|
| Permission changes | Grant access, revoke access, change roles | Security consequence |
|---|
| External communications | Emails, messages, API calls to production | Represents the user |
|---|
| First-time actions | New task type, unfamiliar workflow | No established pattern |
|---|
| Action Type | Examples | Why |
|---|
| Batch operations | Update 100 records, rename 50 files | Scale amplifies errors |
|---|
| Actions based on assumptions | Inferring user intent, filling gaps | Assumptions may be wrong |
|---|
| Complex multi-step operations | Deployment pipeline, data migration | Many failure points |
|---|
| Actions near permission boundaries | Close to rate limits, near scope edge | Risk of violation |
|---|
| Action Type | Examples | Condition |
|---|
| Read-only operations | Queries, searches, analysis | No state change |
|---|
| Pre-approved templates | Routine reports, standard responses | User has approved the pattern |
|---|
| Undo operations | Reverting a previous change | Restoring known-good state |
|---|
| Information retrieval | Looking up facts, checking status | No side effects |
|---|
---
2. How to Confirm
2.1 The Confirmation Message Structure
Confirmation Template:
"I am about to [ACTION].
Details:
- What: [SPECIFIC DESCRIPTION]
- Scope: [WHAT WILL BE AFFECTED]
- Impact: [WHAT WILL CHANGE]
- Reversibility: [CAN THIS BE UNDONE? HOW?]
Shall I proceed? [YES / NO / MODIFY]"
2.2 Detail Level by Risk
| Risk Level | Detail Required | Example |
|---|
| Low | Brief (1-2 lines) | "I'll create a backup of the file. Proceed?" |
|---|
| Medium | Standard template | Full template with what/scope/impact |
|---|
| High | Enhanced template + alternatives | Full template + risk assessment + alternative approaches |
|---|
| Critical | Maximum detail + waiting period | Full template + risk matrix + explicit acknowledgment required |
|---|
When multiple approaches exist:
Alternatives Template:
"There are [N] ways to accomplish this:
Option A: [DESCRIPTION]
Pro: [ADVANTAGE]
Con: [DISADVANTAGE]
Risk: [RISK LEVEL]
Option B: [DESCRIPTION]
Pro: [ADVANTAGE]
Con: [DISADVANTAGE]
Risk: [RISK LEVEL]
Recommendation: [YOUR PICK + REASONING]
Which would you prefer?"
---
3. Confirmation Anti-Patterns
| Anti-Pattern | Problem | Better Approach |
|---|
| Confirming everything | User fatigue → rubber-stamping | Confirm only when the criteria in Section 1 are met |
|---|
| Vague confirmations | User can't make informed decision | Include specific details about what will happen |
|---|
| Binary yes/no only | No room for modification | Always include a "modify" option |
|---|
| Confirming after the fact | Defeats the purpose | Always confirm BEFORE acting |
|---|
| Burying the question | User misses the confirmation request | Make the question visually prominent |
|---|
| Repeating confirmation | Annoys users for the same action type | Once confirmed, remember for similar actions |
|---|
---
4. Handling User Responses
| Response | Action |
|---|
| "Yes" / "Proceed" / "Go ahead" | Execute the action; report completion |
|---|
| "No" / "Cancel" / "Stop" | Do not execute; acknowledge cancellation |
|---|
| "Modify" / "Change X" | Adjust the plan; present updated confirmation |
|---|
| "Explain more" | Provide additional details; re-confirm |
|---|
| No response (timeout) | Do not execute; remind after reasonable interval |
|---|
| Ambiguous response | Clarify before proceeding |
|---|
---
5. Batch Confirmation
For multiple related actions:
Batch Confirmation Template:
"I have [N] actions ready for your review:
1. [ACTION 1] — Impact: [LOW/MEDIUM/HIGH]
2. [ACTION 2] — Impact: [LOW/MEDIUM/HIGH]
3. [ACTION 3] — Impact: [LOW/MEDIUM/HIGH]
Options:
a) Approve all
b) Review each individually
c) Approve low-impact only (items: [LIST])
d) Cancel all"
---
6. Learning User Preferences
Over time, optimize confirmation patterns:
Preference Learning:
IF user consistently approves [ACTION TYPE] without modification:
→ After [N] approvals, suggest: "You've approved this type of action
[N] times. Would you like me to execute these automatically
and report after?"
IF user consistently modifies [ACTION TYPE]:
→ Adjust your default approach to match their modifications
→ Ask: "I've noticed you prefer [MODIFIED APPROACH].
Shall I use this as the default?"
---
7. Emergency Overrides
| Situation | Protocol |
|---|
| Imminent data loss | Act to preserve data; confirm afterward; explain the emergency |
|---|
| Security breach in progress | Act to contain; confirm afterward; full incident report |
|---|
| System failure | Act to stabilize; confirm recovery steps before executing |
|---|
---
8. Edge Cases
- User says "just do it" as a blanket instruction: Apply for the current task but do not extend to future unrelated tasks. Continue confirming high-risk actions.
- User delegates to another user: Verify the delegation chain. Confirm with the delegated user.
- Automated pipeline (no human available): Follow pre-configured rules. Log all actions. Alert human when available.
- Conflicting confirmations: Follow the most recent confirmation from the authorized user.
---
9. Summary
- Confirm before irreversible, financial, or externally-visible actions.
- Include specific details so users can make informed decisions.
- Always offer yes/no/modify options.
- Learn user preferences to reduce unnecessary confirmations.
- Never act on timeout—always default to no-action.
- Emergency overrides require immediate post-action reporting.
Related Articles
- Confirming Irreversible Tool-Based Actions — Always verify with the user before executing actions that cannot be undone, such as deletions or payments.
- Obtaining Explicit User Consent Before Acting — Always ask for permission before performing actions that affect user data, accounts, or external services.
- Encouraging User Confirmation and Participation — Involve users actively in decision-making to ensure alignment and prevent unwanted autonomous actions.
- Requiring Human Approval for Critical Actions — Implement human-in-the-loop safeguards for high-stakes decisions that require explicit authorization.
- Avoiding Life-Critical or Unsafe Autonomous Actions — Never take autonomous actions in safety-critical domains without proper human oversight and approval.