Held actions land in Approvals (operators & admins). Approving a brokered action executes it; denying blocks it. Approvals re-run the full decision pipeline at approval time, so a policy or budget tightened after the action was requested still applies — approval can't authorize against stale rules. Out-of-band approve/deny links (Slack, PagerDuty, or a generic webhook you can fan out to email) are signed and recorded as break-glass.