hermes - 💡(How to fix) Fix Approval-Gated Action Executor Skeleton [1 participants]

What to build

Create a skeleton for future L action executors that may eventually change external or production state, but keep the first slice approval-gated and non-destructive. This is a HITL slice because it defines the safety boundary for actions such as DNS changes, deploys, external messages, deletion, money, legal, or customer-impacting operations.

Acceptance criteria

• The action executor skeleton cannot run unless the work item has explicit Leo approval.
• The first implementation performs no destructive or external write action.
• A rejected, missing, or expired approval blocks execution with a clear reason.
• Tests prove a sensitive work item cannot bypass approval through /lexecute, retry, or registry routing.

Blocked by

• #24979