I read this as "the agent should have asked for confirmation before running".