Human-in-the-Loop Verification

Some actions should never be fully automated.

When Needed?

• Checkout — Human must confirm purchase
• Appointment Booking — Confirm date/time
• Contact Forms — Prevent spam
• Account Creation — Prevent fake accounts

Methods

• redirect-to-browser — User completes action manually
• email-confirmation — Click confirmation link
• sms-otp — One-time password via SMS

Flow Example

1. User: “Book me a table at Restaurant X for Friday 7pm”
2. Agent reads policy → bookAppointment requires humanVerification
3. Agent prepares details but does NOT submit
4. Agent: “Found a table. Restaurant requires your confirmation: [link]”
5. User clicks link, reviews, confirms
6. Booking complete — both sides assured a real person authorized it