When an AI agent is about to act, what do you re-check?

I keep seeing production setups with identity, tool permissions, approval steps, and audit logs. But I’m curious about what happens at the very last moment, right before an action actually executes. An agent may be allowed to use a tool, and the user may have approved the task. But things can change in between. A CRM record might be different, a spending limit may already be used up, an approval could be revoked, a role might change, or the actual arguments may no longer match what was originally approved. Do you re-check the specific action and the arguments that matter right before execution, or mostly rely on the permission or approval established earlier? And if you do re-check it, where does that live in your architecture: gateway, policy engine, tool runtime, application layer, or somewhere else?