The action to take on an approval request — APPROVED or REJECTED.
The agent's tool invocation is approved; finalPattern and ttlSeconds carry the finalized scope and lifetime.
The agent's tool invocation is rejected; reason optionally carries a free-text rationale.