Human Approval is Often Not an Effective Control
MediaPositive4282 · reddit · 2026-07-19
The author argues that "human approval" in many agent systems is merely an illusion of control rather than an actual safeguard. It typically fails in three ways: the approval node isn't on the agent's actual execution path; humans approve model-generated descriptions instead of precise calls; and approvers habitually click "agree," reducing the gate to a mere formality. A more reliable approach is to place write permissions after approval, giving agents read-only or proposal capabilities by default, ensuring real side effects are only executed by authorized parties. The author adds that in practice, issues usually stem not from attackers, but from repeated or erroneous operations caused by retries and replanning, making idempotency far more critical than often assumed.
Related event: Author Says Agent Human Approval Is Often Theater(2 posts)→
More from coding & agent
- Grok Build CLI v0.2.108 adds cross-machine session resume and editor handoff — Scobleizer · 2026-07-21
- MCP, A2A and function calling each solve a different layer of agent systems — goyalshaliniuk · 2026-07-21
- Grok 4.5 tops a long-horizon terminal benchmark, Elon Musk says — elonmusk · 2026-07-21
- Codex Computer Use grabs a voicemail access code through iPhone call screening — KarelDoostrlnck · 2026-07-21
- Grok Imagine’s Agent mode adds image cropping for smoother video transitions — elonmusk · 2026-07-21
- Skillerr adds signed, inspectable agent skills with permissions and provenance — csinye · 2026-07-21