Humans approve the decisions that matter.
Plan. Scope change. Merge. Evidence. Release. Five named gates. Five named approvers. Five ledger entries per mission.
- Propose: Plan approval · Sign off the mission plan before agents start work.
- Review: Evidence review · Operator drills into raw evidence pack before signing.
- Reject: Rejection · Operator rejects with reason. Mission re-enters rework loop.
- Rework: Rework loop · Agent receives rejection context, retries with constraint.
- Approve: Humans approve the decisions that matter. Five named gates. Five named approvers.
- Run: Five ledger entries per mission.
- armed · 0 breaches ytd
- soc 2 · iso 27001 · nist ai rmf · hipaa · gdpr
- hardware-token gates · 412 audits / hour
- tenant isolation · cryptographic boundaries
- replayable decisions · tamper-evident ledger
Where you intervene.
A mission moves left to right. At each of these five points it stops until a named person signs.
- Gate 1 / 5
Plan approval
Sign off the mission plan before agents start work.
ledger entry 1 / 5 - Gate 2 / 5
Scope change approval
Approve any mid-flight scope change; ledger-logged.
ledger entry 2 / 5 - Gate 3 / 5
Code merge approval
Protected branches require named reviewer attestation.
ledger entry 3 / 5 - Gate 4 / 5
QA evidence approval
Sign the evidence pack before release readiness.
ledger entry 4 / 5 - Gate 5 / 5
Release approval
Hardware-token gate on production releases.
ledger entry 5 / 5
How overrides + rework work.
When a person disagrees with an agent, these are the four things that can happen, and each one is written down.
Override
Operator can override agent recommendation; override + reason logged.
- agent recommendation
- operator overrides
- override + reason logged
Rejection
Operator rejects with reason; mission re-enters rework loop.
- operator rejects with reason
- reason logged
- mission re-enters rework loop
Rework loop
Agent receives rejection context, retries with constraint.
- rejection context
- agent retries
- with constraint
Evidence review
Operator drills into raw evidence pack before signing.
- raw evidence pack
- operator drills in
- signed
You hold the gate.
Walk one mission through its five gates as the approver. Nothing passes a gate until you approve it. Reject it, and the work goes back to the agent with your reason.
- Plan
- Scope change
- Merge
- Evidence
- Release
Plan approval
Sign off the mission plan before agents start work.
retried with constraintOperator drills into raw evidence pack before signing.
- test pack
- security pack
- release pack
Released. The action runs.
Five named gates. Five named approvers. Five ledger entries per mission.
Start a Software Factory pilot.
Connect one repository, one ticketing tool, and one mission. See evidence in days, not quarters.