What I was getting wrong about tool approval gates for AI agents · PitHub