Driver FixRecommendedSound, Wi-Fi or graphics acting up? Check drivers firstFind missing or outdated drivers fast.Check DriversHalloween DealsAmazon USHalloween week deals: useful picks before month-endAmazon US: current deals, useful picks and tech finds.Check DealsSlow PC?RecommendedPC slow today? Run a repair scan before it gets worseResolve common Windows issues and optimize system performance.Scan Now×
Skip to content
World desk3 min

The Move the Agent Is Not Allowed to Make: Signing the Decision

ClauseWatch’s agent can gather and organize compliance evidence, but a human must sign the final decision. Here’s how the project describes that boundary—and what it does not prove.
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

In ClauseWatch, the move an AI agent cannot make is the final step from review to decided: signing a compliance decision. The agent can gather and attach evidence; a person supplies a rationale and name, then signs. That boundary is the central design idea in Oleg Vdovin’s project—not a general proof that the approach is secure or legally sufficient.

What ClauseWatch lets the agent do—and forbids

Vdovin describes ClauseWatch as a workflow for someone handling a compliance file at a small company, where the person responsible may be a founder or lone engineer without a legal department. Its five states are raised, gathering, review, decided and dismissed.

As an Amazon Associate I earn from qualifying purchases.

The project description counts five transitions: two available to the agent and three reserved for a human. The consequential boundary is review → decided. An agent can prepare the material, but it cannot sign the decision. When a person makes that move, the person supplies a rationale and name; Vdovin says the signature and transition record are written together.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

As Vdovin puts it, “Only a person signs. The agent can prepare every part of this and still not make the move.” The point is to separate useful preparation from authority to decide.

Where the boundary lives in the design

Vdovin says the workflow rules are stored as content in a Sanity dataset, and that the same gate function computes which moves are permitted for agent and human actions. In this design, the boundary is represented in the workflow data the system reads, rather than being only an instruction to the agent.

The project uses the Sanity App SDK for its signing desk and describes a public Studio, dataset, server-rendered viewer and public code repository. Vdovin says the deployed signing app requires a Sanity login. These details describe the author’s implementation; they are not an independent audit of the code or deployed application.

Why the example involves compliance judgment

The motivating example concerns logs generated by a high-risk AI system. Vdovin raises a possible tension between retention obligations for logs and the GDPR principle of storage limitation when those logs contain personal data. That is a scenario motivating the workflow, not an established conclusion that the laws are irreconcilable or a recommended retention period.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

GDPR Article 5(1)(e) says personal data should be kept in identifiable form “for no longer than is necessary for the purposes for which the personal data are processed.” It also provides specified longer-retention circumstances for public-interest archiving, scientific or historical research, or statistical purposes under Article 89(1), subject to safeguards. Read the official GDPR text on EUR-Lex.

The relevant EU AI Act logging provision and an authoritative interpretation of how it applies alongside GDPR are not established here. A specific system’s obligations depend on the applicable provisions and facts; its retention decision should be reviewed by qualified counsel or responsible compliance professionals.

What the project is—and is not

Vdovin describes ClauseWatch as a working core, not a complete compliance product, and says it is not legal advice. Its stated configuration contains two instruments, nine provisions, two requirements, three conflicts, two system profiles and one workflow. Those are project counts, not measures of legal coverage or evidence that the design ensures compliance.

A human-only workflow transition is a useful design boundary, but by itself it does not establish that the right person acted, that access was properly controlled, that records cannot be altered, or that the decision is legally sound. Those questions require attention to authorization, credentials, auditability and legal review in the specific implementation.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Why the forbidden move matters

Vdovin’s question is “who is allowed to decide, and how do you stop the machine from quietly deciding for you?” ClauseWatch’s answer is concrete: let the agent assemble the file, but reserve the recorded signing transition for a person. That is the author’s design claim and an illustration of where responsibility can sit in one workflow—not a general security guarantee or a substitute for professional judgment.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Wire

  1. World desk4 min
    How to Spot an AI Voice Scam Before Sending MoneyDon’t rely on how a caller sounds. Pause, call back through a known number, and verify the emergency with another trusted person before sending money.
  2. Mountain View desk4 min
    Google’s SynthID Detector: How to Check AI-Generated Images, Video and AudioGoogle’s SynthID Detector looks for an embedded watermark in supported images, video and audio. Here is what its results do—and do not—show.
  3. Redmond desk20 min
    How to create a link to File or Folder in Windows 11Windows 11 gives you several ways to point to a file or folder without moving or duplicating it. You can create a desktop shortcut,…
Recommended PC Tool
Recommended PC Tool
Crashes, No Sound, or Screen Glitches?Free driver scan
PC Slower Than It Used to Be?Free scan - under a minute

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.