Approvals and policies

Approvals keep people in charge of the actions that matter. A run pauses, a reviewer gets the diff and the reasoning, and the run resumes the second someone says yes.

Where approvals appear

In Slack, Microsoft Teams or the console. Reviewers can approve, reject or ask the agent a question before deciding.

Policies as code

policy "prod-deploys" {
  match   = tool("deploy") && env("production")
  approve = group("sre")
  timeout = "30m"

policy "prod-deploys" {
  match   = tool("deploy") && env("production")
  approve = group("sre")
  timeout = "30m"

policy "prod-deploys" {
  match   = tool("deploy") && env("production")
  approve = group("sre")
  timeout = "30m"

Policies live in your repo and are versioned with the rest of your config. Every decision is written to the audit log.