What human-in-the-loop actually means when an agent writes to your ERP
Everyone in this category claims a human is in the loop. Far fewer will tell you where the gate sits, what happens to an item while it waits, and who is accountable the moment it passes.
title: What human-in-the-loop actually means when an agent writes to your ERP description: >- Everyone in this category claims a human is in the loop. Far fewer will tell you where the gate sits, what happens to an item while it waits, and who is accountable the moment it passes. date: "2026-08-18" readingTime: 9 min category: Engineering featured: true heroCaption: hero image / diagram — approval gate
There are three places a gate can sit, and the choice determines whether the system is genuinely safe or just theatrically cautious. Before extraction is useless — nothing has been proposed yet. After the write is worse than useless — the damage is already in your system of record and you are reviewing history. The only place a gate earns its name is between the proposal and the write.
A gate is a state, not a notification
Sending someone a Slack message and proceeding anyway is not an approval gate. A real gate means the item sits in a held state with the proposed write attached, it cannot advance without an explicit decision, and it ages visibly so nothing rots in a queue nobody owns.
If a person can miss the message and the write still happens, there was never a gate — only a log entry with better marketing.
What the reviewer needs to see
Approving blind is worse than not approving at all, because it manufactures a false audit trail. A reviewer needs the source document, the extracted values, the confidence attached to each, and the specific rule that stopped it. Then approval takes eight seconds and means something.
The four things on every held item
- 01The source, viewable in one click
- 02The exact write being proposed, in your field names
- 03Per-field confidence, not one overall score
- 04The rule that held it, named
Gates should loosen, never tighten
Start with everything held. As the pilot produces real accuracy numbers on your own documents, open the cases you're confident about and leave the rest closed. The direction matters: a system that starts open and tightens after an incident has already spent the trust it needed.