diff --git a/agent-framework/workflows/human-in-the-loop.md b/agent-framework/workflows/human-in-the-loop.md
index c6cfcd18..91293648 100644
--- a/agent-framework/workflows/human-in-the-loop.md
+++ b/agent-framework/workflows/human-in-the-loop.md
@@ -306,6 +306,9 @@ Agents can use tools that require human approval before execution. When the agen
 
 For interactive scenarios where an agent needs to gather more information from the user and iterate before proceeding; rather than only approving or rejecting a tool call; use the **[handoff orchestration](./orchestrations/handoff.md)**. Handoff is interactive by default: when an agent responds without handing off to another agent, control returns to the user for the next input, which enables multi-turn back-and-forth within the orchestration. Sequential, concurrent, and group chat orchestrations do not pause for free-form user input on their own; pair them with a `RequestPort` in a custom `WorkflowBuilder` workflow when you need that control between steps.
 
+> [!IMPORTANT]
+> Treat approval as scoped to the exact tool call in the request. Before sending an approval response, validate the requested function name and arguments against the application's allowlist and current authorization policy. If the call changes, require a new approval.
+
 > [!TIP]
 > For complete examples with code, see:
 > - [Sequential orchestration with HITL](./orchestrations/sequential.md#sequential-orchestration-with-human-in-the-loop)