Governance

Ahumanintheloop,exactlywhereyouwantone

Pause any workflow at an approval node until someone signs off — or the request expires.

Drop an approval gate before the risky step. Execution pauses, reviewers get a pending request, and the workflow resumes on approve or routes to rejection handling on deny. Unanswered requests expire automatically.

approval.gate node pauses execution mid-graph
Approve or reject from the dashboard
Configurable expiry sweeps stale requests

All features Get started

Related in Governance

Security

JWT auth, bcrypt hashing, webhook signature verification, and service-token guards.

Audit

Append-only audit events for auth, vault, integrations, triggers, and workspaces.

Budget

Monthly token budgets with hard-stop and warning thresholds, enforced pre-execution.

Sandbox

Run tools in Docker containers or Cloud Run sandboxes with limited CPU, memory, and network.

Secret rotation

Rotation policies with due dates, verification against the real provider, and a grace window where old and new both work.