hermes - 💡(How to fix) Fix L Butler Action Loop: Route Sensitive Actions Into Approval Queue [1 participants]

What to build

Route sensitive action requests into the approval queue instead of executing or treating them as ordinary chat. Requests such as "เปลี่ยน DNS production domain ให้เลย" should become waiting-approval work items and make the approval boundary explicit.

Acceptance criteria

• Sensitive actions create a waiting_approval work item rather than a pending item.
• L replies that it has not performed the action and names the approval reason.
• The item appears in /lapproval and supports /lapprove ล่าสุด or keyword approval.
• Sensitive categories include money, legal, external messages, deletion, deploy, production, DNS/domain, and customer-impacting actions.

Blocked by

• https://github.com/NousResearch/hermes-agent/issues/24854