Forward approvals

Overview

Bind approval to the exact proposed action, target, owner, expiry, and rollback plan.

• Confirm tenant, project, and accountable owner.
• Define data, identity, policy, and budget boundaries.
• Run the smallest read-only or reversible step.
• Review evidence and acceptance criteria.
• Record approval before consequential change.
• Measure the result and retain rollback.

Production checklist

• Keep credentials in a server-side secret store.
• Set explicit cost, latency, privacy, provider, and regional constraints.
• Capture route and evaluation evidence for incident review.
• Test timeouts, cancellation, fallback, and denied-policy paths before rollout.