Allow ask deny
In short: Allow, ask, deny is a three-outcome policy model for agent actions. Allow lets the action run. Ask pauses it until a named human approves. Deny blocks it and records the attempt. The middle outcome is what turns access control into real human oversight of agents.
Which controls use this term?
- GOV-06Per-action policy. Check each agent action against policy at the moment it happens, using the agent, the person behind it, the tool and the data involved.
- GOV-07Human approval for high-risk actions. Route actions above a defined risk threshold to a named human approver, and block them until that person approves.
Which terms are related?
Agent governance, Per-action policy, Human in the loop, Human oversight, MCP gateway, Policy enforcement point.
Reviewed by The Register desk