Clarify data paths and accountability
The work assignment is to embed approvals where errors have real consequences. Define purpose, owner and permitted operating boundary before the first test.
The domain review baseline covers decision right, visible evidence, stop signal, fallback and audit. Assumptions and missing information remain visible in the result.
Embed controls in the workflow
- Mark decisions with real consequences and the corresponding decision rights in the workflow.
- Provide the evidence needed for substantive approval directly at the decision point.
- Test refusal, the stop signal and the manual fallback using a concrete case.
- Document approval and effects traceably and review the control point regularly.
Review approval against evidence
An approval test shows the evidence available to the accountable person and how refusal or stopping prevents the effect. The fallback works in the example and the decision remains traceable in the audit.
Avoid: having a human click at the end merely as a formality. Approval is substantively insufficient if the person can neither review relevant evidence nor effectively stop the action or use a fallback.
Decision matrix
| Decision point | Proceed when | Stop when |
|---|---|---|
| Data and accountability | Documented: decision right, visible evidence, stop signal, fallback and audit. | Scope, data or accountability remains unresolved. |
| Control evidence | An approval test shows the evidence available to the accountable person and how refusal or stopping prevents the effect. The fallback works in the example and the decision remains traceable in the audit. | There is only an unevaluated demo without acceptance evidence. |
| Approval boundary | Owner, approval, fallback and next review date are defined. | Avoid: having a human click at the end merely as a formality. Approval is substantively insufficient if the person can neither review relevant evidence nor effectively stop the action or use a fallback. |
Keep it verifiable
Primary sources
- NIST: AI Risk Management Framework coreSource checked:
- n8n: Production AI Playbook — Human OversightSource checked:
