HUMAN CONTROL / BUILT IN

AI does the work.
People make the call.

Tempo can move quickly without moving blindly. People define the assignment, watch the work unfold, approve consequential actions, and intervene whenever judgment matters.

See where people stay in control
TTempoWork completeAKHuman reviewDecision requiredExternal actionWaiting
APPROVAL REQUIRED

Send the recovery plan to 14 account owners?

Tempo prepared individualized updates using approved customer and inventory data.

No action happens until Alex decides
THE OPERATING MODEL
DELEGATEOBSERVEREVIEWAPPROVE
Autonomy with explicit edges
THE PRINCIPLE

Autonomy should
have edges.

The goal is not to put a person in front of every keystroke. It is to let routine work flow and bring people in exactly when context, authority, or consequences demand it.

01Routine

Runs automatically inside established policy.

AUTO
02Sensitive

Continues with visibility and added evidence.

OBSERVE
03Consequential

Stops at a named human approval gate.

APPROVE
04Prohibited

Cannot proceed, regardless of instruction.

DENY
01BEFORE THE RUN

Set the edges
before work begins.

Define what an agent may read, which tools it may use, what it can change, how much it can spend, and where a human decision is mandatory.

Explicit delegation

Every run starts with a user, purpose, scope, allowed resources, and expiration.

Action thresholds

Escalate based on data sensitivity, audience, monetary value, volume, or irreversibility.

Hard prohibitions

Some actions remain unavailable—not merely hidden behind another confirmation dialog.

AGENT POLICY / CUSTOMER OPERATIONSACTIVE
R
Customer recordsRead approved fields
ALLOW
W
Draft customer updatesCreate drafts only
ALLOW
!
Send externallyAny audience over 5 people
APPROVAL
×
Delete customer dataUnavailable to this agent
DENY
12 capabilities allowed4 require approval3 prohibited
LIVE RUN / SUPPLIER RECOVERY02:18
OBJECTIVEBuild a recovery plan for delayed inventoryStarted by Morgan Lee

Review purchase orders and supplier email27 records · 8 threads

DONE

Identify customer commitments at risk14 accounts

DONE

Compare alternate inventory sourcesWorking across 3 systems

LIVE

Draft recovery plan and updates

NEXT
02DURING THE RUN

See the plan.
Change the direction.

Tempo makes its work inspectable while it is happening. See the objective, current step, sources, tool activity, and remaining plan—then pause, redirect, or stop it.

Live progress

Know what the agent is doing now instead of waiting for a mysterious final answer.

Visible tool use

See every source read and every system contacted as the run unfolds.

Immediate intervention

Pause, add context, narrow scope, change course, or stop without losing the work already completed.

03 / AT THE CONSEQUENCE

Routine work flows.
Consequential work waits.

Approval gates appear at the action—not after the damage. Tempo explains what it wants to do, why, what will change, and who has authority to decide.

EXTERNAL SHARING

Send or publish

Review audience, content, attachments, and data classification before anything leaves the company.

Named approver required
FINANCIAL

Purchase or commit

Set thresholds by amount, vendor, budget, category, and cumulative spend.

Budget owner required
SYSTEM CHANGE

Create, update, delete

Inspect the exact proposed change and require stronger review for irreversible actions.

System owner required
SENSITIVE DATA

Access or disclose

Escalate requests involving confidential, regulated, personal, or unusually broad data.

Data owner required
04AT REVIEW

Judge the work.
Not just the answer.

A useful review includes the evidence behind the result. Tempo presents sources, assumptions, calculations, proposed changes, policy checks, and uncertainty in one decision-ready view.

Source-backed output

Trace claims and decisions to the records, documents, and conversations behind them.

Exact proposed changes

Review a clear before-and-after view instead of approving a vague description.

Uncertainty made visible

Low confidence, conflicting information, and missing context are surfaced rather than smoothed over.

REVIEW PACKAGE / RECOVERY PLANREADY
RECOMMENDATION

Split the order across two approved suppliers.

Restores full availability 9 days earlier with a 3.8% cost increase.

12

Source recordsPurchase orders, inventory, email

VIEW
3

AssumptionsClearly labeled and editable

REVIEW
2

Proposed changesSupplier and delivery updates

COMPARE
CONFIDENCE
84%One price confirmation outstanding
05 / AFTER THE DECISION

Keep the receipt.
Preserve the way back.

Every approval, rejection, intervention, and executed action stays attached to the work. Where systems allow it, Tempo preserves rollback information before a change is made.

1

Plan preparedTempo · 10:42

Sources preserved
2

Changes reviewedMorgan Lee · 10:46

2 edits requested
3

Approved and executedPriya Shah · 10:51

14 updates sent

Rollback package retainedPrevious values and recipients recorded

HUMAN JUDGMENT / MACHINE LEVERAGE

Move faster.
Keep the final say.

Design the boundaries, approvals, and intervention points that fit the way your organization carries responsibility.

Design your control model