Press adds first-class Effects and adversarial approval for agent tool calls

RichmanRonald · x · 2026-07-23

The next version of Press turns “Effects” into a first-class mechanism for external, irreversible state changes in agent workflows.

It adds an adversarial session by default to run all external effects, with optional policies written in the same Markdown/OpenProse structure as the rest of the system.

The post frames this as a direct answer to safety problems such as model-to-tool misuse: instead of trusting the main agent, a separate model can sit between tool calls, review the trajectory, and approve or block actions.

Original post →

More from coding & agent

coding & agent channel →