Genkit Patterns: Why Code Gates Beat Prompt Gates for AI Safety

Google's Genkit framework offers two human-in-the-loop patterns: interrupt-as-a-tool and restartable tool. The interrupt pattern relies on the LLM to call a safety check, which can be bypassed by persuasive users or prompt injection. The restartable tool enforces a deterministic code gate that the LLM cannot forge, making it essential for security-critical actions like money transfers.