v1.4 control-plane capability

Approval Workflow Console

Review connector/tool approval requests before simulated or future live execution. v1.4 remains sandbox-safe; approvals create audit history but do not enable live side effects.