Skip to content

Make approvals single-use and bound to one action #132

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
Arthur9293 wants to merge 1 commit into from
Closed

Make approvals single-use and bound to one action #132

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
11 changes: 11 additions & 0 deletions adrs/single-use-action-bound-approvals.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,11 @@
# Make approvals single-use and bound to one action

What makes me uncomfortable when I give an AI approval to act is the possibility that the same approval could be reused for other actions.

When I approve something, I mean one specific action inside a limited scope. I do not mean that the agent should keep the same authority and use it again later.

I would like an approval to be bound to the action the user reviewed, including the target, operation, and important arguments. Once that action has been executed, the approval should be consumed and no longer reusable. If the action or its scope changes, the agent should ask for a new approval.

After execution, I would also like a clear readback showing what happened before and after the action. This should remain in the audit trail so the user can verify that the approval was used only for what they intended.

A small first version could apply this only to actions that create an external side effect, while read-only actions continue to work as they do today.