Every action the agent tries is checked by the control system first: allowed actions run, important ones wait for a person, forbidden ones are blocked.