Lesson 6 of 9 · 7 min read
Human Approval That Holds
Human approval adds a person’s decision to an action that policy already permits. Trusted presentation, an authenticated approver, immutable action details and execution-side enforcement connect that decision to its effect. Review volume and usability matter, but a click, signature or second device alone does not establish informed consent or prevent duplicate execution.
Get full Premium access · $25
Every worked answer in all 17 topics, every lesson in every course, the full concept curriculum, the complete practice-test bank, and the downloadable security field guides.
6 months · One payment · No auto-renewal
Practise it as an interviewer asks it
Explain the lethal trifecta and use it to triage an agent design in two minutes.Secure an agent that reads customer data, retrieves internal documents and calls APIs. Where do you start?What is SSRF, and why do LLM tools that fetch URLs bring it back?What is excessive agency, and how do you contain it?What security risks does the Model Context Protocol (MCP) introduce?How would you detect and investigate an AI security incident?