Interrupt Authority

Interrupt Authority is the mechanical capability to halt an agent action while it is in progress. Not after it completes. Not before it starts. During execution.

Most governance operates at the boundary — approving or denying actions before they run. Interrupt Authority extends governance into execution itself. If conditions change, if new information arrives, or if the action is taking an unexpected path, governance can pull the plug.

How It Works

When the executor begins an action, it creates an ExecutionHandle — a live reference to the running action. The governance layer holds the handle and can call interrupt() at any time.

Interrupt Scopes

Scope
Effect

ACTION

Stop this specific action only

AGENT

Stop all actions by this agent

WORKFLOW

Stop this workflow and all child actions

GLOBAL

Emergency stop — halt everything

Rollback

Interrupting without recovery creates problems it doesn't solve. Register a rollback function when beginning execution. If the action is interrupted, rollback runs automatically.

Checking Interrupt Status During Execution

For long-running actions, check interrupt status cooperatively:

Interrupt Records

Every interrupt is recorded in the audit trail with the source, reason, scope, and severity.


Workflow Governance

Interrupt Authority governs individual actions during execution. Workflow Governance extends this to multi-step workflows, detecting risks that only emerge when actions are considered as a sequence.

The Problem With Action-by-Action Governance

Individual actions may each pass governance while the sequence they form is unauthorized.

:::note Example: read customer recordquery payment historyexport data. Each step is individually reasonable. Together they constitute an unauthorized data extraction. Workflow Governance evaluates the sequence, not just each step. :::

What Workflow Governance Detects

  • Compounding authority — steps that each request small permissions but together achieve unauthorized access

  • Cross-step drift — behavioral shift across the workflow indicating the agent changed strategy mid-execution

  • Cascading risk — early steps that enable later steps in risky ways

  • Dependency violations — steps executed out of order or without required predecessors

Using Workflow Governance

Workflow Risk Assessment

Risk Trajectory

Trajectory
Meaning

stable

Risk is not accumulating across steps

increasing

Each step adds more risk than the last

accelerating

Risk accumulation is speeding up

decreasing

Workflow is becoming safer as it progresses

Projecting Forward

Last updated