When approval is required

Approval is required when /api/validate returns status: "WARN".

Authoritative signal

A WARN response includes both a decision_id and an approval_token. Do not execute the underlying action until a human reviewer has approved the decision.

json

{
  "status": "WARN",
  "decision_id": "dec_...",
  "approval_token": "appr_...",
  "risk_score": 60,
  "reason": "WARN: Review required by vendor-managed policy."
}

What to do

Persist decision_id for auditability and later lookup.
Pause execution (do not apply side effects).
Route the decision to a reviewer (typically in the ASG dashboard).
Poll approval status until approved.

Legal & Responsibility Notice

Summary

Informational only

Provided for general guidance. Not legal, compliance, security, or professional advice.

You control implementation

You are responsible for policies, prompts, integrations, workflows, and regulatory requirements.

Liability limitation

To the maximum extent permitted by law, the company disclaims liability for losses arising from use of this documentation or implementations based on it.