Workflow module
The approval and decision record
Turn 'we agreed in a meeting' into a traceable decision with a named owner and explicit limits.
Turn 'we agreed in a meeting' into a traceable decision with a named owner and explicit limits.
Why it matters
Trusting an agent with real work is a decision with an owner, a basis, and boundaries. Without a record it becomes an untraceable 'we agreed to it' that no one can defend later or scope back when something changes.
What good looks like
An explicit record captures who reviewed the agent, what they saw, the conditions attached, and the call itself across six honest states — Draft, Blocked, Approved for pilot, Approved with restrictions, Approved for production, and Retired. 'Approved with restrictions' stays genuinely distinct from 'Approved for production'. A new decision starts at Draft, and an approved state is only ever a human selection — never derived from a readiness number.
What can go wrong
A hallway nod nobody wrote down. No owner, basis, or conditions, so a restricted approval silently becomes unrestricted. A readiness score is treated as the approval. There is no record of who decided what, or with which limits.
What AgentProof checks
AgentProof holds the six-state decision machine with a never-auto-approve invariant: the default is Draft, and an approved state is only ever set by a human — never inferred from a score or signal. It records who decided, on what basis, and with what conditions, and keeps Draft and Blocked visible as gaps. No legal or regulatory conclusion is implied.
Key terms
The exact vocabulary this part of the record uses — grounded in the shipped product model.
- Decision states
- draft, blocked, approved_pilot, approved_with_restrictions, approved_production, retired.
- Never-auto-approve
- Default is draft; an approved state is only ever human-set, never inferred from a score.
- Decided by
- The named person accountable for the decision.
- Decision basis
- What the reviewer saw when they made the call.
- Conditions
- The explicit limits attached to a restricted approval.
Keep reading
Build this record for your own agents
AgentProof turns each part of this into one documented, evidence-backed record — before your compliance review.
Ready to build a compliance-readiness record for your own agent?
Request a compliance readiness pilot to apply this guidance to a real agent.
AgentProof builds a compliance-readiness record, not an official audit, and it does not speak on behalf of any vendor.