Countersign

Examples / field guide

Put a human signature between intent and impact.

Countersign gives action-taking agents a deliberate pause: reviewers see the proposed change, its risk, and its runtime provenance before deciding what happens next. The agent gets a structured response; your team gets an evidence trail.

Shared approval inbox

Review the consequence, not just the tool call.

Route refunds, outbound messages, production changes, or any other consequential action into one queue. Risk, environment, action arguments, and source graph stay attached to the request.

  • Approve safe actions immediately
  • Edit typed fields before execution
  • Reject or send context back to the agent
app.countersign.cloud
Countersign approval inbox showing a refund request, proposed field changes, risk level, and review actions
A high-risk refund request with its proposed change and provenance visible before approval.

Safe intervention

Correct the action without breaking the workflow.

When the agent is almost right, reviewers can change schema-validated fields and approve the corrected action in one decision. Countersign returns the edit in the same interrupt/resume flow.

Best for
Refunds, limits, recipients, deployment parameters
Recorded
Original proposal, edited values, reviewer, and time
edit review
Countersign edit form for changing a refund amount before approving the agent action
Typed edits let a reviewer correct an action without sending the workflow back to the beginning.

The workflow

One boundary, four clear steps.

  1. 01Interrupt

    The agent proposes a consequential action.

  2. 02Inspect

    Countersign shows the diff, risk, and provenance.

  3. 03Decide

    A reviewer approves, edits, rejects, or responds.

  4. 04Resume

    The workflow continues with a structured decision.

Start with the working demo

See the whole review loop before you integrate.

The public demo uses realistic local data, so you can inspect a request, edit fields, send a response, and explore the audit timeline without connecting an agent.