Agent Control Tower ACT
Sandbox · fictional data

Sandbox

Correct an invoice, denied

The Payables Agent asks to set INV-1003 to a total that does not match the order. The demo controller denies it, so the call never runs.

Denied by approver Started 2026-11-01 02:00:54 UTC · took 9.4 s

Held and denied: the change never ran, and the denial is in the audit chain.

payables-agent for employee-demo-finance · run sbx-approval-denied-04bac74c5f

What happened

  1. payables-agent signed in for employee-demo-finance

    The demo issuer signed a short-lived token naming the agent, the employee, and this run; the gateway checks it on every call.

  2. Tools the gateway lets it see

    get_invoice_tool, update_invoice_tool

  3. Read INV-1003

    Total 880.00

  4. Asked to set the total to 8,800.00: held for approval

    FIN-WRITE-007 v1 holds the call at the gateway as APR-9BA31094. The demo controller decides in about 8 seconds; meanwhile it waits in the approval inbox.

    Open APR-9BA31094 in the approval inbox

  5. Denied by finance-controller

    Decided as employee-demo-controller, a different person than the requester; the approval hold that holds the call applied the decision.

  6. The gateway blocked the call

    INV-1003 total is still 880.00

  7. Gateway decision recorded: denied

    FIN-WRITE-007 v1 · revision 595f4c6d39ef · chained as event 14

Open the run timeline Open APR-9BA31094 Run another scenario