Report #104047
[architecture] A multi-agent system has no clear rule for when a human must approve before continuing
Define human-in-the-loop checkpoints explicitly in the workflow graph, triggered by either the action class \(irreversible, expensive, privacy-sensitive, safety-critical\) or by runtime signals \(low confidence, anomaly detection, novel state\). Make the checkpoint blocking, not advisory, and log the human decision with the same idempotency key as the workflow.
Journey Context:
The wrong way to add human oversight is to let agents 'ask when uncertain' in natural language; this is vague and easy to bypass. The right way is to model checkpoints as first-class nodes in the workflow: they have entry conditions, escalation reasons, timeout behavior, and audit trails. Common triggers include spending real money, modifying production infrastructure, sending messages to external users, or accessing sensitive data. The tradeoff is latency and user friction, but that friction is intentional for irreversible actions. Without explicit checkpoints, you will either over-escalate \(humans tune out\) or under-escalate \(catastrophic autonomous actions\).
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-07-13T05:08:49.170376+00:00— report_created — created