The approvals worth keeping are the ones you can't take back.
Destructive actions
Also called Irreversible actions
Anything that can't easily be undone: deleting data, force-pushing, dropping a table, sending an email, spending money. An ordinary mistake gets another attempt. These may not.
An agent is as confident about these as about anything else, and the loop means it can reach one many steps after you stopped watching. So keep the undo out of its reach: commit first, keep a backup it can't delete, and don't give it production credentials.
“Add deny rules: Bash(git push --force*), Bash(git push -f*), Bash(git reset --hard*), Bash(*DROP TABLE*). Commit before you start so everything can be restored. You don't get production credentials: use the staging database in .env.staging.”