Human in the Loop

Place human judgment at the decision point where it changes risk. A confirmation dialog alone is not oversight: bind an authorized decision to an understandable, immutable action and preserve evidence of what happened.

Inputs

Collect or infer, and label assumptions for:

• Agent goal, workflow states, and every action it can propose or execute
• Effect type, reversibility, value, affected people, and worst credible impact
• Data sensitivity, regulatory or contractual duties, and organizational risk tolerance
• Stable requester and approver subject identities, role assignments, policy owner, separation-of-duties rules, and coverage hours
• Required response time, timeout behavior, escalation contacts, and availability target
• Evidence an approver needs, including provenance, uncertainty, and alternatives
• Existing identity, policy, audit, ticketing, and notification systems
• Failure, retry, cancellation, compensation, and incident paths

Do not invent approver authority or organizational policy. If missing information affects a consequential action, produce a proposed policy and mark it for owner approval.