Question 220
A financial agent prepares a transfer, but its PreToolUse policy hook cannot contact the authorization service. The user requests immediate execution. What should happen?
Explanation
Correct Answer
An unavailable permission service does not grant authority. Fail-closed behavior protects financial side effects while permitting later safe recovery.
Incorrect Answers
Model confidence cannot substitute for trusted authorization. The financial gate must remain enforced.
An unrelated destination would create a much larger error. Unverified operations must be blocked.
Absence of a response is not approval. Failing open bypasses a critical control.