In Mentat, when sensitive operations are involved—such as accessing sensitive files or running arbitrary scripts—the agent pauses and requests one-tap approval via WhatsApp before executing.