Human-in-the-loop · queue

Approvals

Every stage gate, every critical requirement, every PR merge — a human signs off. Agents never finalise regulatory, financial, customer-facing, data-retention or security controls on their own.

Decomposition Agent

Stage gate: Decomposition → Solution Design

Drafted 3 Epics and 14 User Stories for the 'Bureau Score v3 — SME segment' concept, with Acceptance Criteria.

+ Epic ECB-2401  Bureau Score v3 — SME segment
+ Story ECB-2402  As an SME applicant I want to view my score history…
+ Story ECB-2403  As a lender I want to compare SME scores across periods…
+ AC: score recomputed nightly; surfaced within 200 ms p95

Age 12 min · due in 1h 48mRequired approver: Product ManagerECB-2401

Solution Design Agent Human validation required

Critical requirement validation — Data retention

Proposed retention of consumer dispute artifacts for 7 years in Azure Blob (UAE North) with WORM lock. Requires named approver under PDPL.

retention.consumer_disputes = 7y
storage.tier = cool
immutability = WORM
residency = uae-north

Age 1 hr · due in 6hRequired approver: Solution Architect + DPOECB-2398

Cannot be approved by an agent.

React Native Developer Agent

PR merge approval — feature/sme-score-history

PR #884 — adds Score History screen, 6 new components, 14 unit tests. SonarQube quality gate: passed.

screens/ScoreHistory.tsx           +182 -0
components/ScoreLineChart.tsx     +96  -0
__tests__/ScoreHistory.test.tsx   +154 -0
…

Age 26 min · due in 3h 30mRequired approver: Tech LeadECB-2402

Automation Agent

PR merge approval — tests/sme-score-history

PR #885 — Playwright + pytest coverage for SME Score History flow. 22 new tests, 0 flakes on 10x rerun.

tests/e2e/sme_score_history.spec.ts   +212 -0
tests/api/test_score_history.py       +88  -0

Age 8 min · due in 3h 52mRequired approver: Tech LeadECB-2402

Execution & Triage Agent

UAT sign-off — Bureau Score v3 release candidate

147/152 tests passing. 5 failures triaged as known-flaky (network). Performance NFRs met (p95 = 183ms).

Age 44 min · due in 4hRequired approver: Platform SupervisorECB-2380

Security Agent Human validation required

Critical requirement validation — Authn change

Proposed switch of mobile auth from OTP-only to OTP + device-binding. Touches regulated authentication control AC-04.

Age 2 hr · due in 5hRequired approver: Solution Architect + CISO delegateECB-2371

Cannot be approved by an agent.