An approval should expire when the AI action changes

A reviewer approves a draft message. The assistant then updates the recipient list or attaches another file before sending. The workflow still records “approved,” but the reviewed and executed actions differ.

Bind approval to a specific proposal

Record the action, relevant parameters, content version and authorised approver. Make material fields visible to the reviewer.

OWASP’s excessive-agency guidance examines risks from excessive functionality, permissions or autonomy. Version-bound approval is one application-level response; it is not a complete security solution.

An illustrative procurement assistant should not reuse approval for one supplier and amount after either changes. The exact materiality rules need to follow the organisation’s authority structure.

Define invalidation conditions

Changes in recipient, destination, amount, attachment or scope may require a new decision. Apply those rules in the workflow rather than rely only on the model remembering them.

Also consider time. An approval made before relevant information changed may no longer be appropriate, even if the stored text is identical.

Give reviewers a concise comparison so reapproval is usable. A system that repeatedly demands unclear approval can encourage careless acceptance.

Verify the execution record

Keep evidence of the approved version and actual action. If the external service changes or rejects parameters, reconcile the outcome before marking the task complete.

Present a concise before-and-after comparison when reapproval is required. Reviewers need to see the material change without rereading the entire task history. The comparison should support informed attention rather than make approval feel like a repetitive obstacle users are encouraged to dismiss quickly.

GAT’s enterprise trust guide emphasises accountable controls. Approval supports that accountability when it is attached to an inspectable action and cannot quietly survive a change in what the system intends to do.