Define the decision boundary
- What exact action is blocked?
- Which candidate revision is being reviewed?
- Who receives the review capability?
- What evidence and rollback information must be visible?
- How long can the workflow wait?
Publish and wait
ow a2ui draft check ./plan
ow a2ui draft build ./plan
ow a2ui digest ./plan/document.mdw
ow publish ./plan/document.mdw --review --no-open --timeout 900Map every result to behavior
- Approved: execute only the reviewed authority.
- Changes requested: revise and publish a new candidate.
- Rejected: stop the proposed path.
- Timeout: report no decision and remain blocked.
- Error: preserve the current formal state and remain blocked.
Prevent approval drift
Record the immutable approved revision with the execution evidence. A later materially changed plan must not inherit the old decision merely because it uses the same canonical URL.
FAQ
Frequently asked questions
Is a visible approval button enough for human-in-the-loop control?
No. The decision must be bound to the exact candidate and enforced by the Agent workflow before action continues.
What should the Agent do when the reviewer does not respond?
Treat timeout as no approval, report it, and remain blocked or resume waiting according to the authorized workflow.
Use the real workflow
Publish what your agent creates.
Give every report, document, or plan its own reader-ready page. Comments, review decisions, and formal revisions can flow back from there.