Guardrails

Approvals That Wait

Nothing happens until a human approves.

Sensitive requests become draft actions with an exact payload and expiry — approved in-app, with a second approver where policy requires. BOB never executes on its own.

How A Proposal Becomes An Action

  • Proposed actions carry an exact-action hash and an expiry, so what you approve is exactly what happens.
  • Approval happens in-app, with a step-up confirmation outside the chat for sensitive actions.
  • Where policy requires it, a second person must approve — the requester can never approve their own proposal.

The Record

  • Every decision — allowed or denied — is written to your tenant-scoped audit trail with the reason.
  • Anything BOB could not do, and why, is stated in plain words.

What It Does Not Do Yet

  • Autonomous money movement, publishing and bulk messaging stay disabled — marked Coming soon, not quietly enabled.

See It In Your Own Workspace.

Demo workspaces start in sandbox mode — no live data, no executions, nothing leaves the building.