human-in-the-loop

# Human in the Loop Place human judgment at the decision point where it changes risk. A confirmation dialog alone is not oversight: bind an authorized decision to an understandable, immutable action and preserve evidence of what happened. ## Inputs Collect or infer, and label assumptions for: - Agent goal, workflow states, and every action it can propose or execute - Effect type, reversibility, value, affected people, and worst credible impact - Data sensitivity, regulatory or contractual duties, and organizational risk tolerance - Stable requester and approver subject identities, role assignments, policy owner, separation-of-duties rules, and coverage hours - Required response time, timeout behavior, escalation contacts, and availability target - Evidence an approver needs, including provenance, uncertainty, and alternatives - Existing identity, policy, audit, ticketing, and notification systems - Failure, retry, cancellation, compensation, and incident paths Do not invent approver authority or organizational policy. If missing information affects a consequential action, produce a proposed policy and mark it for owner approval. ## Output contract Deliver: 1. An action inventory and rationale-backed risk tier for each action 2. A gate policy defining validated predicates, eligible approver roles and distinct subjects, quorum, evidence, expiry, timeout, structured escalation, audit-outage behavior, execution-time reauthorization, compensation, break-glass, and separati...