Approval inbox
userThe AWAITING_REVIEW pause: reviewing a prepared plan's resolved fields and hash before any wallet handoff, plus approve, reject, and cancel — with cancellation allowed only up to APPROVED_FOR_WALLET.
The inbox is where a prepared plan waits in the AWAITING_REVIEW state. It is the deliberate pause between preparing an action and any wallet handoff: you read exactly what was compiled — the action type, chain, contract, asset, amount, and plan hash — before anything is ever signed.
What you review
- The typed action. A human summary plus the resolved canonical fields. Nothing here was authored by a model — the critical fields came from deterministic resolvers.
- The plan hash. The frozen fingerprint of the whole plan. It is re-verified by the kernel before any handoff; a mismatch blocks the action. See the security model.
- Expiry. A value-bearing plan lapses after its TTL (15 minutes by default). An expired plan cannot be approved — you recompile a fresh one.
What you can do from the inbox
- Approve for wallet — advances the run to
APPROVED_FOR_WALLET. This only stages the plan for you to sign; it is gated behind the signing flags and is disabled in this pilot. See wallet handoff. - Reject — discards the plan (
REJECTED). Nothing was signed. - Cancel —
POST /api/console/plans/:id/cancelcancels an unsigned run and records the event. Cancellation is allowed only up to and includingAPPROVED_FOR_WALLET.