# Approvals & governance

Source: https://amolfi.com/docs#amo--approvals-and-governance

Anything touching money or leaving your workspace waits for a named owner to approve it. An agent can prepare the action, but it cannot approve its own work.

### The rule that never bends

Money and anything outbound — a client email, a public post, or a contract sent for signature — always becomes an approval card that a workspace owner has to approve before it runs. The agent cannot self-approve, no matter how routine the action looks.

### Bounded by design

- Each agent is bounded — a hard risk ceiling and a kill switch, so one agent can never borrow another’s authority.
- Agents run as the person who asked, with that person’s own permissions — never more.
- Sensitive actions append to an audit log as they happen, so there’s a written record of what happened and who approved it.

The result is an assistant that moves fast on the low-risk parts of the work and stops, visibly, at the parts that need a human decision.