Confirm, receipts and approvals

Your AI can read from your apps freely, but it cannot change anything on its own. Every create, send, change or delete goes through a confirm step that only a person can complete. This page explains that step, the record ahel keeps of what ran, and the approvals a team can add on top.

#Confirm before changes

When your AI asks an app to change something, ahel does not run the call. It returns a confirm card with the values filled in, which says "Nothing runs until you press" its button. A change that cannot be undone also says so and asks you to check every value.

• Only a person can press it. The button carries a one-time code that your AI never sees. If the AI tries to run the change itself, ahel refuses and nothing happens.
• It runs once. Pressing runs the change a single time, with the values on the card.
• It expires. A card nobody presses expires after an hour. "Expired. Nothing ran, and this card will not run."
• It works without cards. Where no card is shown, as in coding tools, ahel gives your AI a link to the same confirm on ahel.ai, at app.ahel.ai/app/confirm/.... You open it, sign in if asked, and press the button there.
• Reading never asks. Looking things up runs straight away.

This is the Confirm before changes setting, on for every workspace by default. The workspace owner sees it on the Guardrails page in settings.

#Receipts

Every call your AI makes through ahel is recorded. Activity in your workspace is the receipt list: "every call your AI made and every use of a key". Each app action shows whether it completed or needs attention, what went in and what came out, and a link to that run.

Use it to check what a change did, to see why a call failed, or to see which key was used and when.

#Approvals for a team

On the Team plan, owners and team leads can add rules on the Guardrails page. A rule can block a call outright, advise the AI, or say a call needs approval by an owner or team lead.

When a call needs approval:

1. The call is held, and nothing runs. Your AI is told the call is "Held for approval" and who has to say yes.
2. An owner or team lead sees it on the team page under the calls waiting for a yes, and presses Approve or Send decline.
3. After an approval, your AI makes the same call with the same values again, and it runs once. The approval lasts an hour, and a held call that nobody answers expires after a day.

Approval rules are part of the Team plan. Set approval rules shows how to add one.