An agent must obtain human approval before deleting a production resource. Where should this be enforced?

1. In the agent's avatar label
2. After deletion in the final response template
3. Only in a prompt saying ask politely
4. In the action-execution path before the destructive tool is allowed to run