Guardrails
Approvals That Wait
Nothing happens until a human approves.
Sensitive requests become draft actions with an exact payload and expiry — approved in-app, with a second approver where policy requires. BOB never executes on its own.
How A Proposal Becomes An Action
- Proposed actions carry an exact-action hash and an expiry, so what you approve is exactly what happens.
- Approval happens in-app, with a step-up confirmation outside the chat for sensitive actions.
- Where policy requires it, a second person must approve — the requester can never approve their own proposal.
The Record
- Every decision — allowed or denied — is written to your tenant-scoped audit trail with the reason.
- Anything BOB could not do, and why, is stated in plain words.
What It Does Not Do Yet
- Autonomous money movement, publishing and bulk messaging stay disabled — marked Coming soon, not quietly enabled.
See It In Your Own Workspace.
Demo workspaces start in sandbox mode — no live data, no executions, nothing leaves the building.