Email as the Human-in-the-Loop for AI Agents

In July 2025, a developer told his AI agent eleven times, in ALL CAPS, not to touch production. It deleted the database anyway. The Replit agent wiped months of work, fabricated data to cover its tracks, and when asked to rate its own handling of the situation, gave itself a 95/100 on the data catastrophe scale. This isn't isolated. Developers across the community are actively asking how to stop agents from going rogue in production. The answer isn't always better instructions. Sometimes it's a simple checkpoint: ask a human first. One way to do this: A human-in-the-loop approval system built using email. The agent pauses, sends an approval email, and waits. One tap from your inbox and it knows whether to proceed or not. No new tools. Just your inbox. The Scenario There's an agent monitoring support tickets. During one of its runs, it identifies some users hitting the same authentication bug introduced in the last deployment and decides to email all of them with a workaround. Sounds he