Skip to main content

​
Governed actions and approval controls

​
Action classes

​
Informational

No state change. Examples:
  • explain a fee
  • summarize a statement
  • list missing documents

​
Preparatory

Creates a draft or proposal. Examples:
  • draft customer message
  • prepare payment instruction
  • draft credit memo

​
Protected

May change customer, arrangement, or facility state. Examples:
  • update signatory
  • release payment
  • approve offer
  • waive covenant breach
  • grant forbearance

​
Protected action sequence

User or agent request
  -> tool selection
  -> policy evaluation
  -> entitlement check
  -> approval rule lookup
  -> draft command created
  -> approver action if required
  -> core execution
  -> event emitted
  -> evidence recorded

​
Approval design requirements

Protected action docs state:
  • approval trigger
  • number of approvers
  • approval level source
  • maximum authority
  • escalation path
  • expiry rule
  • cancellation rule

​
Why this matters

Banks can tolerate AI-assisted work. They do not tolerate undocumented control leakage.