"Require human approval" sounds safe until every action needs a click.
People stop reading. Approval becomes muscle memory. The human is technically in the loop and practically absent.
A better model is scoped authority:
- who granted it
- exact action and target
- limits and expiry
- what evidence the agent must use
- what must return to a human
Routine actions run inside that boundary. Anything outside it stops. The tool enforces the grant instead of trusting the prompt to remember the policy.
The interesting design question is not whether a human touches every action. It is whether the agent can prove which human had authority for this action.
Where would you draw the boundary between standing authority and mandatory review?
[link] [comments]