My AI Agent Did Something I Never Approved
An agent acted before you saw it, and trust is gone. Approval-first control routes every consequential action to one inbox before it ships.
Founder, Task Machine
Autonomy you did not sign up for is not autonomy. It is a liability with a progress bar.
Most agent tools treat approval as an afterthought: the loop runs, and you find out what it decided from a summary — or from a customer replying to an email you never saw. Once an agent has posted, sent, or merged something without you, the damage is rarely catastrophic, but the trust is. You go back to doing everything yourself, and the tool joins the graveyard of things that almost worked.
Approval is not a feature. It is the default.
Task Machine inverts the usual direction. Every agent has an autonomy level, and the standard setting routes every consequential action — a send, a post, a merge, a spend — to one inbox where it waits for your yes. Nothing user-facing ships until you approve it. The agent drafts, prepares, and packages. You decide.
That single inversion changes what agents are for. Instead of hoping the loop behaves, you delegate freely, because the boundary is enforced by the system rather than by the model's judgment on a good day.
Trust is a dial you turn, not a promise you make
Approval-first does not mean approving forever. As an agent proves itself on a kind of work — the drafts come back clean, the checks pass, the rejections stop — you raise its autonomy exactly there. Routine actions proceed on their own, but the risky ones still interrupt you. Budgets and verifier checks stay in force at every level, so even a fully trusted agent operates inside hard limits.
And before risky work runs at all, an agent writes down what it plans to do and scores how far the change reaches — its blast radius — so the surprising cases surface before execution, not after.
The difference you feel
The first week, your inbox has more decisions in it than you expected — that is the system showing you everything that used to happen invisibly. By the third week, the routine has earned autonomy, the inbox has thinned to real judgment calls, and nothing has gone out with your name on it that you did not see. That is what control is supposed to feel like.