Oversight in motion
Action guard
An action guard is an approval gate placed on a specific class of action according to its risk and reversibility, with the frequency of approval set by the person rather than fixed by the vendor.
Control sits with the person
When to use it
Deleting, sending, publishing, spending, or any write to a system where the previous state cannot be restored.
What it prevents
Consequential actions taken without authorization, and equally the approval fatigue that comes from gating everything.
Approval requiredirreversible
Delete 1,204 records from Customers
ReversibleNo
PolicyAlways ask
Reading a recordNever asks
Who ships it
- Microsoft Magentic-UI: action guards
- Enterprise agent control planes: allow, deny and require-approval policy applied at a gateway, so the agent cannot route around it
Sources
Related patterns: Intent preview · Action audit and time-limited undo