What you see
For each paused operation: the statement as it will run — scoped, column-restricted, masked — its parameters, its class, whether it is provably bounded, how many records it estimates, the hazards it carries, and the agent’s own stated reason for doing it. For a change, the same preview a reviewer gets.What you can do
Ending a session refuses what is pending rather than letting it through: a session that ends because you closed your laptop should not commit a queue of changes.
Filters
Pause everything, or only what you care about:
Sessions can also be limited to particular agents, and carry a TTL so one left open expires on its own.
Exporting a session
Debug Mode always blocks, even when the connection or the request asks for async approval. It is an interactive tool: a person is stepping through the agent live, and there is nothing to poll for.