Approval gates: Bots do the work, you keep the irreversible clicks
Bots draft, prepare and queue; you approve anything that sends, posts, buys, refunds or deletes. Grok Bot builds this in with draft cards, approval cards and Custom Rules.
How it works
- Email and Slack messages arrive as draft cards you send or discard. Mail from a Bot's own email address works the same way.
- Before an action it can’t undo, such as sending, posting, buying or deleting, a Bot checks your messages for approval (October 11, 2026).
- Approval cards name the Bot and quote its instruction. "Always allow" turns an approval into a saved Custom Rule you can edit in Settings.
- Purchases need your approval and can use a saved card from your Link wallet; a declined or expired request says no charge was made.
- In Slack, a Team Bot that needs approval posts a "Review an action" card that only you can answer.
Starter prompt
Rules for this Bot:
- Draft, never send: every email, Slack message and post waits for my approval.
- Never refund, buy, cancel, delete or change permissions without an approval card.
- When you ask for approval, include what you'll do, to whom, the exact text or amount, and why.
- If I don't answer within [4 hours], remind me once, then leave it.
- Keep a log in [doc] of what I approved, edited or rejected, and learn from my edits.
Business fit
Which businesses benefit, and how:
- Shopify & ecommerceStores let a Bot handle refund requests while every refund still needs a tap, the way Claire Vo's support Bot works.
- Local & serviceOwners let a Bot answer quote requests and reviews without anything going out unseen.
- StartupsTeams give Bots real tool access early, because nothing irreversible happens without a person.
- AgenciesAgencies can tell clients that a person approved every outgoing message.
Watch-outs
- Draft cards include an option to disable drafts for that Bot, so it sends directly. Treat that as a promotion, not a convenience.
- "Always allow" saves a rule that keeps applying. Review your Custom Rules every month.
- If you approve everything without reading it, the gate isn't working. Narrow the Bot's job instead.
Related
- Evidence grade BRun customer support with a bot that asks before refundingGrok Bot
- Evidence grade DDraft support replies inside your helpdesk with a self-hosted agentHermes Agent
- Answer inbound leads in minutes from the Bot's own email addressSales prompt
- Chase overdue invoices with polite drafts you approveCPA / Finance prompt
- Approve-to-send support desk: AI drafts every reply, a person clicks sendPlaybook