A setting for each tool
Each connected system is read-only or not, and each write tool is allowed, held for a person or denied.
Human approval
A person decides before the write
You choose which changes an agent may make by itself and which wait for a person. The approver sees the exact request, and can correct it before it runs.
Approval
How a write is held
New connections start held
A new connection starts at approval required, so its writes wait for a person. You can hold any tool by name.
Tied to the exact request
An approval covers one agent, one tool and one set of arguments. If any of them changes, the request needs a new approval.
Edit, then approve
An approver can correct the request before approving it. The corrected request is checked again before it runs.
Approve where you work
Approve in the console or from a card in Microsoft Teams, or decide several requests in one call through the API.
Rules on arguments
Add a rule on a tool's arguments, such as an amount above a limit. A rule can make a tool stricter, never looser.
Autonomy
Autonomy that is earned
Start an agent in shadow and let its record earn the next level. The ladder can hold more writes than the connection's own settings, never fewer.
Shadow
The agent's writes are not sent. Each one is recorded for a person to review.
Draft
Every write waits for a person. The agent drafts, a person sends.
Exceptions
Routine writes run. A write with a high risk score waits for a person, and a sample of the rest is checked by a person afterwards.
Autonomous
The connection's own settings decide. A smaller sample is still checked.
Raised by a person
The platform suggests a higher level when the record supports it, and a person raises it one step at a time. The level drops by itself when the record turns bad.
Questions
Frequently asked questions
Does every action need approval?
No. Reads do not, and you choose for each write tool whether it is allowed, held for a person or denied.
Can we require two people?
Yes. Turn on four-eyes approval and a second person must approve.
Is the approval recorded?
Yes. Each write through a connected system leaves a receipt, and an approved write's receipt names the approval.
What decides an agent's autonomy level?
Its record: approved writes that ran, rejections, and a reviewer's verdict on sampled writes. A person makes each promotion.
Related