PydanticAI 2.57.0 adds ApprovalReviewer: a second model pre-clears safe agent tool calls

KhuyenTran16 · x · 2026-11-12

Khuyen Tran covers ApprovalReviewer, new in PydanticAI 2.57.0, which tackles human-approval fatigue in agents.

Problem: human approval is a good safety check for dangerous shell commands, but when every harmless command also needs approval, repeated prompts train people to blindly click 'Approve'.

How it works: a second model (the example uses anthropic:claude-haiku-4-5) reviews each approval-required tool call before a human sees it, with a customizable question like 'could this delete data, reach the network, or expose secrets?'

Logic: low-risk calls continue in the same run step; risky, uncertain, or failed reviews still require human approval.

Related event: PydanticAI 2.57.0 Introduces ApprovalReviewer to Reduce Human Approval Fatigue(2 posts)→

Original post →

More from coding & agent

coding & agent channel →