allow ask deny
In short: Allow, ask and deny are the three outcomes of a per-action policy. Allow lets the action run, deny blocks it, and ask pauses it until a named person approves. The ask outcome is what turns a block list into human oversight of risky agent actions.
Where does it show up in practice?
NewCore describes actions that are allowed, need approval or are denied.