Concept
AI Approval
Decide in policy which actions an agent may take alone and which need a person, then check each action before it commits. An action that needs approval waits for a named approver who sees exactly what will run. The approval covers that one action only, and the record shows who gave it.
How do I require human approval before an AI agent acts?
Decide in policy which actions an agent may take alone and which need a person, then check each action before it commits. An action that needs approval waits for a named approver who sees exactly what will run. The approval covers that one action only, and the record shows who gave it.
- What does OWASP recommend for approving AI agent actions?
- The OWASP Top 10 for LLM Applications lists Excessive Agency as LLM06 and recommends that a person approves high-impact actions before they are taken. A policy check in front of each action is how you apply that only where it matters, instead of on every call.
- Is a thumbs-up in Slack or Teams enough approval?
- Only when it is bound to the action. A yes given to a message, rather than to the exact payment, refund or change, can be reused or misread. Bind the approval to the action's details, let it be used once, and keep a signed record of who approved what.
- Who should approve an AI agent's action?
- The person who would sign off if a colleague asked: the owner of the budget, the account or the system. Name them in policy by role, so the request reaches them where they already work, and verify it is really them when the action is sensitive.
7 patterns answer this
Safe code deployment
A pipeline — or an agent with repo access — ships to production, force-pushes, or runs a migration.
1 policy pack
Procurement approval
A purchase order, vendor onboarding, or supplier change is submitted for release.
2 policy packs
Treasury payment release
A vendor payment, payout batch, or cross-border transfer is released.
3 policy packs
Customer refund
A refund, credit, or goodwill adjustment is issued to a customer.
2 policy packs
Privileged access grant
An access request grants elevated or root scope to a person, contractor, or service.
1 policy pack
Cloud spend increase
An autoscale event, a new cluster, or a provisioning script commits ongoing cloud spend.
Its gate and signals
Payroll and HR process release
A payroll run commits, or an HR business process (termination, compensation change, hire) executes.
2 policy packs
From this term to a governed action
- Safe code deploymentThe recurring action behind this term.
- DevOps & CI policy packThe pack whose rules decide it, rule by rule.
- Try to break it in the sandboxA real signed verdict, no account.
- Deploy on your surfaceAvailable on 3 platforms today.
- Verify the proof yourselfCheck the signature without trusting us.
- Start NowMeasure on your traffic before enforcing.
Where this fits
Decionis is the deterministic decision layer between intent and execution. This concept is one way in; the architecture behind it is the same in every case.