There is a version of AI automation that quietly takes actions on your behalf and hopes you do not mind. We do not build that version.
Agents in the systems we build investigate, draft, and prepare. They get the work to the point of a decision. Then a person decides.
Make the boundary structural
It is not enough to ask an agent nicely not to act. The approval gate lives in the data model: there is simply no path for an irreversible action to happen without a human signing off. You cannot misconfigure your way around it.
- Drafts wait for review. Edits become signal for next time.
- Every action carries a trace, so the whole chain can be reconstructed.
- How much to delegate is a setting the operator controls, not a default we chose.
Done right, this is not friction. It is the thing that lets a team hand real work to a system without lying awake about it.