Send money
Before: No check. Money gone.
→ Should this payment happen? Who approved? Where to? Proof?
Publish content
Before: Post first, review later.
→ Verified? Source checked? Appropriate? Owner approved?
Delete files
Before: One click. No confirmation.
→ Who requested? Backup confirmed? Owner approved?
Deploy code
Before: Push to production. Hope.
→ Tests pass? Reviewer approved? Rollback ready?
Export data
Before: Download everything.
→ What data? To where? Whose permission? Normal?
Admin changes
Before: Unlimited power.
→ Is this normal? Divergence detected? Second approval?
Action request arrives
↓
WHO — Identity verified?
WHAT — Action type allowed?
WHERE — Device/route normal?
WHY — Intent matches pattern?
PROOF — Verification required?
RISK — Divergence detected?
↓
ALLOW ✓HOLD ⏸BLOCK ✗REVIEW 👁