People stay in charge: designing human approval into autonomous workflows
Autonomous workflows can test, match and draft faster than any team. Deciding still belongs to people. Here is how to design approval into the flow so speed and accountability go together.
AI can now do more than flag a problem. It can gather the evidence, draft the email to the supplier, prepare the journal and propose the fix. The question is no longer whether software can act. It is when it should, and who decides.
Our answer is simple: the software prepares, people decide.
Why approval matters
- Accountability. A regulator, an auditor or a board will ask who decided. "The system did" is not an answer.
- Context. People know things the data doesn’t: a supplier dispute, a pending deal, a one-off agreement.
- Trust. Teams adopt tools they control. They work around tools that control them.
Design approval into the flow
Decide what the software may do alone
Some actions are safe to automate fully: collecting data, running tests, matching records, drafting a note. List them explicitly.
Decide what always needs a person
Anything that moves money, changes a master record, contacts a third party or closes a finding should wait for a named person to approve it.
Make approval quick
An approval request should carry everything needed to decide: what happened, the value, the evidence and the proposed action. One screen, one decision.
Record every decision
Who approved, when, what they saw and what they changed. The record is the control.
Learn from rejections
When a person rejects a proposal, that is information. Feed it back so the next proposal is better.
A simple ladder
| Level | What the software does | What people do |
|---|---|---|
| 1. Detect | Runs tests and raises exceptions | Investigate and decide |
| 2. Prepare | Gathers evidence, drafts the action | Approve, edit or reject |
| 3. Act with approval | Carries out the approved action | Approve each one |
| 4. Act within limits | Acts alone below agreed limits | Review a sample and the log |
Most finance processes should live at levels 2 and 3. Level 4 suits only low-value, well-understood actions, with limits a person has set.
Where CoSaaS fits
One of the principles behind CoSaaS is that AI does the work and people make the calls. Our AI accelerators are built around approval steps, and every action they take is logged for audit.

