Human Approval Gate Checklist

Always require human approval before an agent performs these actions:

• Sending external email, SMS, social posts, or client messages.
• Charging money, refunding, changing Stripe, or touching billing.
• Printing, exposing, moving, or rotating secrets and credentials.
• Publishing production changes with user, revenue, or client risk.
• Deleting data, contacts, issues, files, campaigns, or records.
• Making claims about customers, testimonials, results, or compliance.

Allow autonomous execution when all are true:

• The task is scoped to a reversible artifact, draft, branch, report, or local file.
• The agent has enough context to proceed without guessing.
• The final output can be reviewed before it affects customers or public channels.
• The agent reports exact receipts and blockers.