← All field notes

Responsible automation / NOTE.004

Human-in-the-loop AI without creating a new bottleneck

“A human reviews it” is not a complete safety design. Review can reduce risk, but poorly designed review turns automation into a slower queue where people approve outputs without enough context.

01

Name the decision the person owns

Human oversight works when responsibility is explicit. Identify what the reviewer decides, what evidence they need, and what happens after approval, correction, rejection, or escalation. Avoid a generic approval button that mixes factual verification, policy judgment, and authorization.

Different decisions may require different roles. A subject expert can judge meaning, an operations owner can approve a workflow action, and a security or compliance owner can evaluate restricted cases. Sending every result to one queue obscures these boundaries.

02

Review based on risk, not habit

Full review is sensible during early evaluation and for high-consequence actions. As evidence grows, low-risk cases that pass deterministic checks may need only sampling, while unusual or uncertain cases receive deeper review. The threshold should follow observed failure patterns.

Do not use a model confidence number as the only gate. Confidence can be poorly calibrated and may not reflect business consequence. Combine signals such as missing source evidence, policy category, unfamiliar input shape, validation failure, and requested action.

03

Make verification faster than redoing the work

A reviewer should see the proposed result beside the relevant source, with differences and validation warnings clearly marked. If they must reopen several systems, search the document, and reconstruct the reasoning, the automation has shifted rather than removed effort.

Design correction controls around the actual task. Structured fields need inline edits; classifications need clear alternatives; drafted messages need an editable preview; recommendations need supporting evidence. Keyboard navigation and sensible defaults can matter as much as model accuracy.

  • Show source evidence next to the proposed output
  • Explain why the item entered review
  • Keep approval, correction, rejection, and escalation distinct
  • Preserve the original output and the final human decision

04

Prevent automation bias

People may accept a plausible output when the interface presents it as authoritative. Use neutral language such as “proposed” or “draft,” and avoid visual treatment that implies verification before it occurs. Highlight missing evidence rather than hiding uncertainty.

For selected evaluations, ask reviewers to assess the source before revealing the proposed answer, then compare decisions. This can reveal whether the system changes judgment in helpful or harmful ways. Periodic calibration exercises also keep review standards aligned across a team.

05

Turn corrections into measured feedback

Record the category of each correction, not only the final text. Was context missing, a rule unclear, retrieval incomplete, formatting wrong, or the source ambiguous? Categorized feedback helps distinguish a product problem from a model problem.

Before using corrections for future training or evaluation, review data rights, sensitive content, retention, and representativeness. Operational feedback can contain personal or confidential information and can encode inconsistent reviewer habits.

06

Monitor the review system itself

Track queue age, review time, correction rate, override patterns, and outcomes by risk category. A falling review rate is not automatically good; it may reflect unsafe thresholds. A rising correction rate may indicate input drift, a model change, or a new business rule.

Give reviewers a way to pause automation or flag a systemic issue. The human loop should be an operational control with ownership and service expectations, not a decorative disclaimer attached to an autonomous process.

Effective human oversight places the right evidence and authority at the right decision. The goal is controlled automation, not universal approval queues.