Human Approvals
Sensitive actions return to a person.
Agent → transfer → REQUIRE_APPROVAL → Telegram → Approve / Deny → re-check → execution
A configured approval threshold turns a transfer into WAITING_APPROVAL. The dashboard creates a one-time Telegram bot link. Only that account-linked Telegram chat can approve or deny an HMAC-signed callback for the exact intent.
Approval expires with the reservation. Approval is not financial authority: it is a human decision surface. Before settlement, Paymod reloads wallet state and policy. A new hard denial, pause or insufficient balance stops execution.