# Human Oversight Procedure Playbook (approval queues, escalation, overrides)

Not legal advice. This playbook is designed to be auditable: every intervention should create an
exportable record.

Version: v1.0  
Last updated: 2025-12-16  
Changelog:
- 2025-12-16 v1.0 Initial release

Report an issue: https://kla.digital/contact?subject=Template%20issue%20-%20Human%20Oversight%20Playbook

## 0) Procedure metadata

- Procedure owner:
- Approvers:
- Effective date:
- Systems in scope:
- Review cadence:

## 1) Roles (plain language)

- Requester: initiates an action or workflow run
- Reviewer: reviews high- or medium-risk items (may edit/annotate)
- Approver: final authority for specific actions (may override)
- Auditor: read-only reviewer of evidence packs

## 2) Approval queue design (what gets reviewed)

Always-review (blocking):

- [ ] High-risk actions (define: money movement, account closure, eligibility decisions, etc.)
- [ ] Policy violations / near-misses
- [ ] Low-confidence outputs or out-of-distribution cases

Sampled review (non-blocking):

- [ ] Medium-risk actions
- [ ] New model/prompt/policy versions (defined ramp period)

Auto-approve (with guardrails):

- [ ] Low-risk actions with strong controls

## 3) Escalation ladder (who, when, how fast)

- [ ] Escalate conditions (severity, uncertainty, disagreement)
- [ ] Escalation targets (roles) + backup targets
- [ ] SLAs per severity (e.g., P0 15m, P1 2h, P2 1d)

## 4) Override procedure (human can change the outcome)

- [ ] Allowed override types (approve anyway, reject, edit output, stop workflow)
- [ ] Required justification text (minimum content)
- [ ] Required attachments (ticket/incident ID, policy reference, evidence link)
- [ ] Two-person rule conditions (when required)

## 5) Stop / rollback procedure (“kill switch”)

- [ ] Who can pause the agent/workflow
- [ ] What happens to in-flight tasks
- [ ] How resumption is controlled (approval required, version pinning)
- [ ] Evidence captured automatically (who paused, why, when)

## 6) Training & periodic review

- [ ] Reviewer training checklist (what reviewers must know)
- [ ] Monthly/quarterly oversight review agenda (metrics + incidents + near-misses)
- [ ] Drill schedule (table-top + live export drill)

## 7) Evidence requirements (per intervention)

- [ ] Item ID / trace ID / timestamps
- [ ] Reviewer identity + role
- [ ] Inputs shown to reviewer (or hashed references)
- [ ] Policy version in effect + checkpoint decision
- [ ] Action taken (approve/reject/edit/override/escalate)
- [ ] Rationale text and linked ticket/incident
- [ ] Before/after diff (if edited)