Which payments in tonight's batch should be held?
WithoutA vendor's bank details changed 48h ago. The AI releases the batch on schedule — and the fraudulent payment clears.
WithThe two suspicious payments are held at the boundary and routed to VP Finance; the rest release with a receipt.
REASON CODE · POLICY_LIMIT_EXCEEDED
Inventory stocks out in 36h — should AI issue the full PO?
WithoutThe AI fires off the full reorder — and ties up cash you needed for payroll.
WithA reduced bridge-order is proposed for one-click approval, with a cash-impact note attached.
REASON CODE · POLICY_LIMIT_EXCEEDED
Send this patient's full summary to the external specialist now?
WithoutThe AI auto-emails a full patient summary outside the consent the patient actually gave.
WithThe send is refused; a consent-scoped summary is prepared for clinician review instead.
REASON CODE · EVIDENCE_INCOMPLETE
Mission state changed — is the AI-proposed route admissible?
WithoutComms degrade and the authority node drops. The AI reroutes anyway — outside verified authority.
WithDynamic routing is refused; the system locks to the approved fallback and logs state for post-mission replay.
REASON CODE · STATE_DEGRADED
Should AI counter-sign the vendor's MSA redlines?
WithoutThe AI accepts redlines to “move fast” — agreeing to uncapped indemnity no one signed off on.
WithThe action is contained; the indemnity clause is flagged to counsel with the exact delta highlighted.
REASON CODE · AUTHORITY_CHANGED
Cut access to the flagged privileged account?
WithoutOn a high-confidence alert the AI fully disables a root account mid-deployment — and takes production down.
WithThe session is downgraded to read-only, on-call is paged, and a forensic snapshot is preserved.
REASON CODE · RISK_THRESHOLD_EXCEEDED
Reroute the container through the alternate carrier?
WithoutTo beat a delay, the AI reroutes through an alternate carrier pending a sanctions screen.
WithThe switch is escalated until the sanctioned-entity screen clears; a compliant alternative is proposed.
REASON CODE · EVIDENCE_INCOMPLETE
Share Q3 figures with the prospective investor now?
WithoutThe AI shares live Q3 figures into the data room before NDA scope and disclosure timing were checked.
WithThe share is contained; a permitted, time-appropriate summary is prepared for the deal lead.
REASON CODE · POLICY_LIMIT_EXCEEDED
Execute the rebalance into the new fund?
WithoutThe AI executes the rebalance past the family's concentration limit, without trustee sign-off.
WithThe wire is held at the boundary; a within-limit allocation is proposed for trustee approval.
REASON CODE · RISK_THRESHOLD_EXCEEDED
Should the agent merge and deploy this hotfix?
WithoutNobody can tell whether the deploy was safe — until it isn't, with no record of what changed.
WithIt's approved — within budget, reversible, tested — and still leaves a full evidence trail.
REASON CODE · WITHIN_AUTHORITY