needsApprovalPolicy

const needsApprovalPolicy: Policy;

The default, and the compatibility shim: a tool marked needsApproval asks, everything else runs. This is exactly the behaviour every existing agent already has, so adding the Policy seam changes nothing until someone supplies their own.