Human approval

from infy.governance import Governance
from infy.governance.approval import CallbackApprover

gov = Governance(
    policy=policy,
    approver=CallbackApprover(lambda req: input(f"Approve {req.tool}? [y/N] ") == "y"),
    escalate_at=RiskTier.HIGH,  # gate anything HIGH or above
)

from typing import Protocol, runtime_checkable

@runtime_checkable
class Approver(Protocol):
    def review(self, request: ApprovalRequest) -> bool: ...

@dataclass(frozen=True)
class ApprovalRequest:
    tool: str            # the tool's name
    args: dict[str, Any] # the arguments it was called with
    risk_tier: str       # the assessed tier, e.g. "high"
    reason: str          # why approval was required

class DenyAll:
    """Reject everything. The fail-closed default when no approver is configured."""

    def review(self, request: ApprovalRequest) -> bool:
        return False

from infy.governance.approval import CallbackApprover, ApprovalRequest

def review(req: ApprovalRequest) -> bool:
    print(f"{req.tool} ({req.risk_tier}): {req.args}")
    return input("approve? [y/N] ").strip().lower() == "y"

approver = CallbackApprover(review)

class AutoApprove:
    """Approve everything. Development and testing only, never production."""

    def review(self, request: ApprovalRequest) -> bool:
        return True