Three-Tier Architecture for Real-World Agent Action Approval
AiGentsy · reddit · 2026-07-17
When AI agents need to perform real-world actions like sending emails, calling APIs, or transferring funds, simple prompt-based confirmations or Slack notifications are often bypassed by the model or lead to blind human approval. The author proposes splitting the approval mechanism into three distinct layers:
- Policy Layer: Before notifying a human, deterministic rules should dictate whether manual intervention is required (e.g., auto-approving micro-transactions while blocking high-risk ones), thereby mitigating approval fatigue.
- Execution Layer: The approval gating must be structural; operations cannot reach the actual function without permission, and it must "fail closed."
- Evidence Layer: Approval records should contain offline-verifiable cryptographic signatures, rather than self-attested logs stored in an internal database.
Based on this paradigm, the author developed the open-source tool aigentsy, which wraps tools in a single line of code and returns verifiable proofs.
Related event: Approval and Audit Debates for Production AI Agents(6 posts)→
More from coding & agent
- Anthropic researcher: 99% of engineers now run swarms of 300+ self-improving agents — AlishaOutridge · 2026-09-11
- Gergely Orosz: Shipping 10x PRs With AI Agents, Sites Fill With Small Regressions — ducha_aiki · 2026-09-11
- Same Echo Maze prompt, three frontier models: all passed visually but shipped the same hidden bug — eyishazyer · 2026-09-11
- Astra storyboards plus Minimax H3 per-shot generation boost video success rates — Hailuo_AI · 2026-09-11
- Codex tip: use Sol with Astra and Luna sub-agents to save usage — pvncher · 2026-09-11
- agents-best-practices: a provider-neutral Agent Skill for designing and auditing agentic harnesses — tom_doerr · 2026-09-11