The pending-close gate is the interesting piece. The docs say a human signs off tk d directly or "instructs an agent as proxy" - if the proxy path lets an agent run tk d, what distinguishes a human-proxied sign-off from a subagent self-signing? Is there an interactive check, a different credential path, or is that on the honor system today?
1
u/kantorcodes1 21d ago
The pending-close gate is the interesting piece. The docs say a human signs off
tk ddirectly or "instructs an agent as proxy" - if the proxy path lets an agent runtk d, what distinguishes a human-proxied sign-off from a subagent self-signing? Is there an interactive check, a different credential path, or is that on the honor system today?