2026-08-21
Approval gates in agent loops: where to put a human, and how to keep the loop moving (2026-08-21)
Fully autonomous loops break trust; fully manual workflows waste the automation. The answer is well-placed approval gates. A practical guide to choosing gate locations, designing review payloads a human can decide on in thirty seconds, and using timeouts so waiting never strands a run.
← Back to BlogEvery team that ships agent loops reaches the same fork in the road: run everything unattended and risk a bad action reaching the outside world, or require a human everywhere and lose the point of automating. The working middle is the approval gate — one or two well-chosen pause points where a human decides, and autonomy everywhere else. Where you place those gates matters more than how many you add.
Put gates before irreversible actions, not after uncertain ones.
The criterion is reversibility, not difficulty. Publishing a page, sending an email, spending budget, deleting a record — these cross a boundary that no retry un-crosses, and they are exactly where a gate belongs. By contrast, a summarizer producing a mediocre draft is a quality problem, and the fix is a better exit condition or an evaluator node, not a human reading every draft. A loop with a gate on every node is not governance; it is a very expensive form.
Design the review payload for a thirty-second decision.
A reviewer who must reconstruct context from a raw JSON blob will either rubber-stamp or block everything. The approval node should assemble the decision surface itself: the pending action in one line, the input that produced it, the loop's own assessment of its confidence, and the exact thing being approved. If the output is a message, show the message as it will be sent. If it is a spend, show the amount and the remaining budget. Thirty seconds of real review beats thirty minutes of archaeology.
Make waiting safe with timeouts and fallbacks.
An unbounded pause converts an automation problem into a queue nobody watches. Every gate needs an explicit timeout policy: fail the run when the decision matters, skip the step when it is optional, or auto-approve when the action is low-risk and the delay costs more than the risk does. The policy belongs in the loop definition, decided calmly at design time, not invented by whoever notices the stuck run at midnight.
Keep the gate's record as good as the loop's.
Every decision — approve, reject, edit — should land in the trace with who decided, when, and what changed. That record is what makes gates auditable, and it is what lets you tune them: a gate where nobody ever edits anything may be ready for auto-approval; a gate where everything gets edited is telling you the upstream node needs fixing. LoopCraft's approval nodes, released today, carry this whole pattern — decision payload, edit-and-continue, timeout policies, and trace recording — at https://getloopcraft.com. Feedback: sapsap@qq.com.
Reading time: 6 min