Security and governance

Human approval

Where Converge waits for a person.

Converge keeps a person in the loop wherever a change matters.

Action approvals

An action type can require approval. Applying it creates a pending request that a user with approval permission accepts or rejects in Approvals. The approver role exists for people who only decide these requests.

Agent write tools

Agents never write on their own. A write tool call pauses the session in awaiting_review until a person confirms or rejects it. See Agents and the Agent Stack.

Connector actions

Connector write actions always need confirmation. Only read-only actions can run automatically. See User connectors.

Write-back to source systems

Writes to external systems go only through approved actions or exports, with a separate write grant and per-source write policy. Direct pushes are refused.