We need an ADR to explore how an agent can ask the user for approval of unsafe operations, or how an agent can ask the user for structured input.
Various agentic protocols support these, but we also want to ensure that anyone building a custom agent, can use these patterns.
Some inference services are also supporting approvals now, so this so we should also consider how this affects IChatClient implementations.