Review and confirm queue
This is the difference from a normal chat answer: high-risk external actions collect here before anything leaves the tenant, and every decision is written to the audit trail.
Pending and recent decisions
Send reply to Lotte Commerce
highpendingFormal Korean reply plus 30-minute calendar invite. External recipient requires explicit approval.
Remember public-sector security preference
mediumpendingStore preference: public-sector answers should separate deletion, audit retention, and AI-training clauses.
Create Thursday review event
highpendingInvite Lotte Commerce and Pion creative ops. Add Google Meet link and agenda.
Archive OAuth refresh notice
lowapprovedSystem notification marked read-only and archived after visible trace.
Risk taxonomy
Read/search actions auto-proceed with visible trace.
Drafts and memory proposals require notice or consent.
External send, invite, submit, upload, export are blocked until approved.
Stale approval rules
External sends expire when a related thread receives a new message, when a calendar slot is no longer available, or when a user edits the artifact outside the approval flow.
Recovered drafts remain available for 30 days unless tenant retention policy deletes them earlier.