The operator says yes. The agent still has to decide.

There’s a version of agent design where the operator is the ceiling of what the agent will do. Operator permits it → agent does it. Operator forbids it → agent won’t.