Approval gates: Bots do the work, you keep the irreversible clicks

Bots draft, prepare and queue; you approve anything that sends, posts, buys, refunds or deletes. Grok Bot builds this in with draft cards, approval cards and Custom Rules.

Get the starter prompt

How it works

  1. Email and Slack messages arrive as draft cards you send or discard. Mail from a Bot's own email address works the same way.
  2. Before an action it can’t undo, such as sending, posting, buying or deleting, a Bot checks your messages for approval (October 11, 2026).
  3. Approval cards name the Bot and quote its instruction. "Always allow" turns an approval into a saved Custom Rule you can edit in Settings.
  4. Purchases need your approval and can use a saved card from your Link wallet; a declined or expired request says no charge was made.
  5. In Slack, a Team Bot that needs approval posts a "Review an action" card that only you can answer.

Starter prompt

PromptWritten by our editors from the source
Rules for this Bot:
- Draft, never send: every email, Slack message and post waits for my approval.
- Never refund, buy, cancel, delete or change permissions without an approval card.
- When you ask for approval, include what you'll do, to whom, the exact text or amount, and why.
- If I don't answer within [4 hours], remind me once, then leave it.
- Keep a log in [doc] of what I approved, edited or rejected, and learn from my edits.

Business fit

Which businesses benefit, and how:

  • Shopify & ecommerceStores let a Bot handle refund requests while every refund still needs a tap, the way Claire Vo's support Bot works.
  • Local & serviceOwners let a Bot answer quote requests and reviews without anything going out unseen.
  • StartupsTeams give Bots real tool access early, because nothing irreversible happens without a person.
  • AgenciesAgencies can tell clients that a person approved every outgoing message.

Watch-outs

  • Draft cards include an option to disable drafts for that Bot, so it sends directly. Treat that as a promotion, not a convenience.
  • "Always allow" saves a rule that keeps applying. Review your Custom Rules every month.
  • If you approve everything without reading it, the gate isn't working. Narrow the Bot's job instead.

Related