← All Field Notes

Human control

Who should stay in control of an AI workflow?

A clear framework for deciding which work can run automatically, what AI should prepare and which decisions must remain with a person.

The short answer

The business—not the model or implementation partner—should set the boundary. Repeatable, low-consequence and reversible work can run automatically. AI can prepare context or recommendations where judgment is still needed. Decisions involving trust, safety, employment, money, legal consequence or unusual exceptions should remain with a named person.

Use three operating modes

Treat control as a design decision for every step, not a single yes-or-no choice for the whole workflow. A useful workflow usually combines three modes rather than forcing everything into automation.

  • Human decides: a person reviews context and remains accountable for the action.
  • AI prepares: the system gathers, drafts, classifies or recommends; a person approves or changes it.
  • System runs: a clearly defined and monitored step executes without manual intervention.

Choose the boundary from consequence and reversibility

The more consequential or difficult to reverse a decision is, the stronger the human review should be. Evidence quality matters too. A low-risk classification supported by reliable data may run automatically. A strategic recommendation based on thin or contradictory evidence should receive an independent human review even if the model appears confident.

Frequency is not enough. A task can be repetitive and still carry meaningful consequence. Likewise, a judgment-heavy task may benefit from AI preparation without handing over the final decision.

Design the exception path

Every automated step needs a route back to a person. Define what the system cannot decide, what signals indicate uncertainty, who receives the exception and how quickly it needs attention. Log what happened so recurring exceptions can improve the workflow rather than remaining invisible manual work.

Make ownership operational

A named business owner should control the rules, access, review cadence and shutdown mechanism. Documentation should explain what the workflow does, what data it uses, where AI is involved and how to operate it without the original implementation team. That is what puts the business in control of where automation goes—and where it does not.

Working principle

Human control is not a person checking every output. It is the business deliberately deciding which judgments can be delegated, under what conditions and with what route back.