Wireframe · OAuth agent · Human-in-loop OAuth agent flow
← Ledger

When my agent acts for me

Humans only in the loop where they choose

Friends & family loan tracker. We never touch your money.

Boundary These toggles only govern my agent within scopes I granted. They never let the agent agree for Mom, silence payment SMS, or move money. No money:move scope exists.
Agree within my scope
Require my tap The agent drafts; I tap Agree on the page (or magic link).
Auto-agree in scope The agent may submit my loans:agree after soft confirm. Still cannot satisfy Mom’s agree.
Propose / add-ons
Draft freely, I send The agent prepares addon intents; I hit Send.
Send within scope The agent may POST addon intents with soft confirm (addons:propose).
Payments
Always ring my phone Payment SMS doorbell stays on — not optional in MVP.

Confirm / due / handoff SMS still land on the human phone even when an agent applied the ledger intent.

Audit always on via-agent records every mutation regardless of toggle. Revoke the agent’s grant anytime from OAuth settings.
Back to OAuth agent flow Review agent consent