Topic
Approvals & policy
Deixic fixes within written policy, waits for a named approver with a reason on sensitive changes, and refuses actions outside its authority.
7 articles
Lead article
· 5 min read
What a 10-person company actually has to decide for SOC 2
Four decisions only the company can make for SOC 2: scope, the revocation deadline, who approves production changes, and exceptions. The configuration work can be delegated.
Archive
All Approvals & policy articles
- Designing approvals operators actually read8 min
- Who approves the action when three teams care about it?4 min
- Policy at action time: what the gate evaluates8 min
- The model is not the institution5 min
- Why does a LangGraph approval step run again when I resume it?4 min
- Controls that hold when the agent stops agreeing3 min