Human Approval is Often Not an Effective Control
MediaPositive4282 · reddit · 2026-07-19
The author argues that "human approval" in many agent systems is merely an illusion of control rather than an actual safeguard. It typically fails in three ways: the approval node isn't on the agent's actual execution path; humans approve model-generated descriptions instead of precise calls; and approvers habitually click "agree," reducing the gate to a mere formality.
A more reliable approach is to place write permissions after approval, giving agents read-only or proposal capabilities by default, ensuring real side effects are only executed by authorized parties. The author adds that in practice, issues usually stem not from attackers, but from repeated or erroneous operations caused by retries and replanning, making idempotency far more critical than often assumed.
Related event: Author Says Agent Human Approval Is Often Theater(2 posts)→
More from coding & agent
- GPT-6 Astra beats Factorio with enemies in 44 in-game hours at ~$4,500 API cost — liminal_bardo · 2026-09-11
- Investment Analyst Asks How to Build a Claude-Based Diligence Agent Stack — Careless_Tie2286 · 2026-09-11
- How Do You Catch Behavioral Regressions in LLM Agents Between Releases? — Beautiful_Belt_601 · 2026-09-11
- Treating agents like 50 First Dates: a 3-layer context system so every conversation doesn't start from zero — evielync · 2026-09-11
- Running the Firefox MCP on Android via Termux, ngrok, and mcp-proxy — Nervous-Strain7544 · 2026-09-11
- Run Firefox MCP on Android: Termux + ngrok tunnel tutorial — Nervous-Strain7544 · 2026-09-11