Bounded request
One action and one context
Show the exact action, resource, amount or constraint, policy outcome, and evidence gap under review.
Accountable intervention
Put a Human Decision Where Evidence Runs Out
Human Review gives authorized operators a bounded request, the policy reasons behind it, the supporting evidence state, and a clear expiry. The agent cannot approve its own action.
Current product boundaryThe Human Review Inbox is available for OBSERVE governance records.
THE OPERATING MODEL
Escalation should add accountability, not erase uncertainty.
A review request is linked to one tenant, resource, action, Decision Receipt, and policy context. Reviewer authorization is checked independently from the authority claimed by the agent.
Approve, reject, expire, and comment-free structured dispositions remain separate immutable facts. The original receipt and origin request never change.
WHAT THE RECORD MUST SHOW
A useful review request is narrow, attributable, and time-bound.
Authorized reviewer
Human identity and role
Verify that the responding account has the required tenant role and cannot act across workspace boundaries.
Immutable result
Disposition with expiry
Record approval, rejection, or expiry as a new auditable fact without rewriting the triggering evidence.
EVIDENCE FLOW
A review lifecycle
- 01Policy identifies a review condition
- 02Bounded review request is created
- 03Authorized human inspects evidence
- 04Human approves or rejects, or the request expires
- 05Disposition is appended to the Timeline
- 06Origin request and Decision Receipt remain unchanged
CLEAR PRODUCT BOUNDARY
Human Review is not hidden agent self-approval.
Agents cannot satisfy their own review request. A reviewer decision does not prove payment, delivery, or outcome, and in the current OBSERVE milestone it does not execute the customer action.
COMMON QUESTIONS
Understand the evidence before changing the workflow.
Can an AI agent approve its own review request?
No. Review actions require an authorized human account in the applicable tenant and resource context.
What happens when nobody responds?
The request reaches its deterministic expiry state. It is not silently converted into approval.
Does approval change the original Decision Receipt?
No. The disposition is a separate immutable event linked to the original record.
START WITH EVIDENCE