When a run needs a hard stop for send, money, or deploy. The runtime loads one skill at a time, gives it only the tools it needs, and unloads it when the job is done. Approval is required before anything irreversible.
Scoped tools, hard stops. Send, money, and deploy always require approval.