HITL-Freigabeworkflow: Zustände und Verantwortliche HITL Approval Workflow: States and Owners

Ein Entwurf für eine konkrete Aktion. Designen Sie Approval-Workflows für KI-Agents über Slack, E-Mail, Notion, HubSpot oder eigene Tools — und exportieren Sie einen Markdown-Blueprint mit Audit-Trail, Eskalation und Fallback. Keine E-Mail, keine Anmeldung. Draft a contract for one action. Design approval workflows for AI agents across Slack, email, Notion, HubSpot, or internal tools — and export a markdown blueprint with audit trail, escalation, and fallback. No email, no signup.

Companion: Business-E-Mail-Agent mit Compliance-Kontrollen, Production AI Agent Architecture (Englisch) Companion: Business email agent with compliance controls, Production AI Agent Architecture

A HITL approval workflow state machine separates permission from execution. Name the owner, bind approval to the exact proposed action, and define what happens after rejection, expiry or an uncertain result. Use this blueprint to record those decisions and export a contract your team can review before implementing the write path.

Choose the owner before the approval channel

For one customer reply, identify who may approve the wording, which source records support it, and which system will send it. The same person may not own all three. An expired request stays unexecuted; a timeout after sending needs a target-system check before another attempt.

The generator below exports the proposed states and acceptance checks with your inputs. It runs locally in your browser and does not connect to your business systems. Blank optional fields remain open decisions. This is a planning aid, not a running approval service or a compliance certification.

The operational context-layer case study shows the wider delivery pattern. Use the AI Decision Rights Map to decide which actions need review, then bring the exported blueprint to the write-path review. The consulting offer explains hourly assessment and phased implementation.

Implementation references

LangGraph’s interrupt documentation explains why resumed nodes can repeat side effects. AWS Step Functions callback documentation distinguishes waiting for a callback from timing out. These are implementation references; the exported contract still needs connector-specific tests.

ErforderlichRequiredAktion und VerantwortungAction and ownership

›
Eine konkrete Aktion pro Blueprint — nicht "alle E-Mails", sondern "Antwort auf Support-Ticket senden".One concrete action per blueprint — not "all emails" but "send reply to support ticket".
Eine gute Modellbewertung erteilt keine Befugnis. Dauerfreigaben brauchen eine verantwortliche Person, Grenzen und einen Widerruf.Model evaluation does not grant authority. Standing authorization needs an accountable owner, limits and revocation.
Ein Timeout erteilt keine Freigabe. Eskalation wechselt die zuständige Person, nicht die Befugnis.A timeout grants no approval. Escalation changes the reviewer, not the authorization.
Optional: AdvancedOptional: Advanced — Diese Entscheidungen müssen die Verantwortlichen vor einer Umsetzung prüfen. Leere Felder bleiben im Export offen. — Owners must review these decisions before implementation. Empty fields remain unresolved in the export.

Approver-RegelnApprover rules

›
Schutz vor Approval-Fatigue. Über dem Limit blockt der Agent und sammelt im Queue.Guard against approval fatigue. Above the limit the agent blocks and queues.

Audit-TrailAudit trail

›

Datenschutz- und Security-PrüfungPrivacy and security review

›
Benennen Sie die zuständigen Personen. Dieses Planungstool bestimmt keine Rechtsgrundlage, Aufbewahrungsfrist oder regulatorische Einstufung.Name the responsible reviewers. This planning tool does not determine a legal basis, retention period or regulatory classification.

Fallback & Kanal-AusfallFallback & channel outage

›

Dauerfreigabe prüfenReview standing authorization

›

Generierter BlueprintGenerated blueprint

Den Schreibpfad prüfen lassenReview this action's write path

Bringen Sie den Blueprint, die beteiligten Systeme und eine anonymisierte Beispielaktion zum kostenlosen Erstgespräch mit. Eine separat beauftragte Prüfung klärt Freigaben, Fehlerfälle und Abnahmekriterien. Umsetzung nach Stunden, mit einer Schätzung je Phase. Bring the blueprint, the systems involved and one anonymized example to the free scoping call. A separately commissioned review defines authorization, failure handling and acceptance criteria. Implementation is hourly, with an estimate for each phase.

Schreibpfad-Prüfung ansehenSee the write-path review

Wie dieser Blueprint zu nutzen istHow to use this blueprint

Ein Blueprint pro Aktionsklasse. Kunden-E-Mail, internes Update, Geldfluss — jede bekommt einen eigenen Blueprint mit eigenem Risiko, eigenem SLA, eigenem Kanal. Versuchen Sie nicht, "alle Approvals" mit einem Flow zu erschlagen — das wird zur Sammelstelle, die niemand mehr pflegt. One blueprint per action class. Customer email, internal update, money movement — each gets its own blueprint with its own risk, its own SLA, its own channel. Do not try to cover "all approvals" with one flow — that becomes the dumping ground nobody maintains.

  • Aktionsklasse vor Aktionsname. "Versende E-Mail" ist keine Klasse. "Versende E-Mail an einen Kunden, dessen Vertrag in 7 Tagen ausläuft" ist eine Klasse. Risikoprofil, SLA und Approver folgen aus der Klasse.Action class over action name. "Send email" is not a class. "Send email to a customer whose contract expires in 7 days" is a class. Risk profile, SLA, and approver all follow from the class.
  • Fail-closed bei Hochrisiko. Wenn der Approval-Kanal kaputt ist und die Aktion unumkehrbar ist, ist die richtige Antwort "warte". Niemals Auto-Approve als Fallback — das ist genau das, was Auditoren fürchten.Fail closed on high-risk. If the approval channel is broken and the action is irreversible, the right answer is "wait". Never auto-approve as a fallback — that is exactly what auditors fear.
  • Audit-Trail vor Tag eins. Wenn der Trail nach drei Monaten nachgerüstet wird, sind die ersten 90 Tage unauditierbar. Schreiben Sie ihn am ersten Tag, auch wenn das die Lieferung um eine Woche verzögert.Audit trail on day one. If the trail gets retrofitted after three months, the first 90 days are unauditable. Write it on day one even if it delays delivery by a week.
  • Dauerfreigaben brauchen eine Entscheidung. Benennen Sie erlaubte Aktionen, Grenzen und Widerruf. Gute Modellwerte ersetzen diese Befugnis nicht.Standing authorization needs an owner decision. Name the permitted actions, limits and revocation. Good model scores do not replace that authority.

Approval workflow questions

What states does a HITL approval workflow need?

Separate draft, pending approval, approved, rejected, expired, dispatching, succeeded and failed or unknown outcomes. Approval records permission for an exact action; a target-system receipt records execution. Recheck authorization before dispatch and reconcile an unknown result before retrying.

Can a timeout approve an action?

No timeout grants approval in this blueprint. Let the request expire or escalate it to another authorized reviewer while it remains pending. A separately granted standing authorization must already cover the exact action; silence and later review do not create it.

When can an agent act without per-action approval?

Only within explicit standing authorization from the accountable owner, with permitted actions, limits, expiry or review conditions, and revocation. An approval rate or model benchmark does not grant permission. Actions outside those limits return to review.

What should the approval record contain?

Record the action and target, exact payload hash, evidence versions, reviewer identity, decision, policy version and expiry. Keep an idempotency key and execution receipt separately. The data owner decides what content may be stored, who can read it and for how long.

Does downloading the blueprint enforce these controls?

No. The export is a planning contract. Your implementation must persist state, verify identity and permissions, bind approval to the reviewed payload, handle duplicate callbacks, and test retries against each target system. Resolve every open field before implementation is accepted.

How can I get the write path reviewed?

Bring the blueprint, the source and target systems, an accountable owner and one anonymized example to a free scoping call. A separately commissioned write-path review defines acceptance criteria and prioritized changes. Implementation is estimated and billed by the hour, phase by phase.

In Zwischenablage kopiertCopied to clipboard
The context layer for your AI agents

Your agents answer from whatever the retriever finds, and too often that is last quarter's truth. I build the context layer they answer and act from: a temporal knowledge graph that keeps every fact with its source and the time it held, reads with each person's own permissions, and writes nothing without a person's approval. On your own tenant, billed by the hour, step by step.