Field notes from the control room · Draft

The Approval That Said Yes to Everything

A composite story from a mid-size organisation.

The rule was a good one: every change to the shared tooling needs the owner's approval. In the first weeks the owner read each request, asked questions, and sent a couple back. It felt like exactly what a gate should feel like.

Then the agents got busy. A comment fixed here, a log line reworded there, a dependency nudged, a typo in a readme, a colour changed on a button. Approval requests began to arrive the way weather arrives: constantly, mostly harmless, and without asking whether you had time. The owner, a conscientious person, started approving in batches. Then in runs. Then, on a long Friday, with one steady rhythm of the thumb, because the approval screen had a very large and very friendly green button.

The turn

One afternoon a change arrived that touched who was allowed to deploy. It sat in the list between a typo fix and a colour change, and it was approved in the same second as both of them. Nothing went wrong. A reviewer noticed it a day later, in a routine look at permissions, and put it right.

What stayed with the team was the record. Every approval in the log carried the same reading time, give or take a blink. An auditor would have a word for that, and the word is not "oversight".

The lesson

A gate that asks about everything protects nothing, because the scarce resource is attention, and attention does not scale with the number of requests.

The fix was to decide, in advance, what deserves a person. Changes to permissions, to the shared core, to anything that acts outside the organisation, and any step involving a secret: those stop and wait for a human who reads them, and the approval screen now says in one line what each one changes. Everything else is allowed to proceed and is recorded, with the record sampled on a rhythm by someone who looks at it properly.

The green button stayed. It just stopped being the only button in the building.

Gate what matters and log the rest: an approval nobody reads is a record of nothing.