An approval layer for AI agents. Intercepts agents' tool calls before they run, auto-approves or denies routine calls based on rules, and routes risky calls to the right person. Works with Claude Code, Codex and agents built on LangGraph, Pydantic AI and others through an open protocol called AAP.