Action Restrictions and Permissions › Combining Restrictions, Confirmations, and Permissions

## Using Claude Sonnet 4.5 for comprehensive action safety
class SafeAgent:
    def __init__(self, permissions: Set[Permission]):
        self.permissions = PermissionManager(permissions)
        self.client = Anthropic(api_key=os.getenv("ANTHROPIC_API_KEY"))
        self.pending_confirmations = {}
    
    def send_email(self, to_address: str, subject: str, body: str) -> str:
        """Send an email with permission check, restriction, and confirmation"""
        # Step 1: Check permission
        self.permissions.require_permission(
            Permission.SEND_EMAIL,
            f"Sending email to: {to_address}"
        )
        
        # Step 2: Check restrictions
        if to_address not in ALLOWED_RECIPIENTS:
            domain = to_address.split('@')[1] if '@' in to_address else ''
            if domain not in ALLOWED_DOMAINS:
                return f"Error: Cannot send email to {to_address}. Not in allowed recipients."
        
        # Step 3: Request confirmation
        confirmation_id = f"email_{len(self.pending_confirmations)}"
        self.pending_confirmations[confirmation_id] = {
            'action': 'send_email',
            'params': {
                'to_address': to_address,
                'subject': subject,
                'body': body
            }
        }
        
        return f"""Ready to send email:

To: {to_address}
Subject: {subject}
Body: {body}

Confirm with: agent.confirm('{confirmation_id}')
Cancel with: agent.cancel('{confirmation_id}')"""
    
    def confirm(self, confirmation_id: str) -> str:
        """Execute a pending action after confirmation"""
        if confirmation_id not in self.pending_confirmations:
            return "No pending action with that ID."
        
        action_data = self.pending_confirmations[confirmation_id]
        
        if action_data['action'] == 'send_email':
            params = action_data['params']
            result = send_email_restricted(
                params['to_address'],
                params['subject'],
                params['body']
            )
            del self.pending_confirmations[confirmation_id]
            return f"Confirmed. {result}"
    
    def cancel(self, confirmation_id: str) -> str:
        """Cancel a pending action"""
        if confirmation_id not in self.pending_confirmations:
            return "No pending action with that ID."
        
        del self.pending_confirmations[confirmation_id]
        return "Action cancelled."